Most recent entries from all

ALSA-2025:14075 — Moderate: xterm security update

Affected: AlmaLinux:9: xterm, AlmaLinux:9: xterm-resize

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly.

Security Fix(es):

* xterm: Buffer overflow in set_sixel in graphics_sixel.c (CVE-2022-24130)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-02633

EUVD-2026-14001

fkie_cve-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

GHSA-5v7p-cf4c-24jq

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

gsd-2022-24130

msrc_CVE-2022-24130 — xterm through Patch 370 when Sixel support is enabled allows attackers to trigger a buffer overflow in set_sixel in gra…

msrc_CVE-2022-24130

OESA-2022-1563 — xterm security update

Affected: openEuler:20.03-LTS-SP1: xterm, openEuler:20.03-LTS-SP2: xterm, openEuler:20.03-LTS-SP3: xterm

It is a terminal emulator for the X Window System. Security Fix(es): xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.(CVE-2022-24130)

openSUSE-SU-2024:12733-1 — mlterm-3.9.2-3.1 on GA media

mlterm-3.9.2-3.1 on GA media

SUSE-SU-2022:3952-1 — Security update for xterm

Security update for xterm

UBUNTU-CVE-2022-24130

Affected: Ubuntu:16.04:LTS: xterm, Ubuntu:18.04:LTS: xterm, Ubuntu:20.04:LTS: xterm, Ubuntu:22.04:LTS: xterm, Ubuntu:24.04:LTS: xterm, Ubuntu:25.10: xterm, Ubuntu:26.04:LTS: xterm

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

WID-SEC-W-2022-1030 — xterm: Schwachstelle ermöglicht nicht spezifizierten Angriff

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in xterm ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.