OESA-2022-1648
Dashboard / Vulnerabilities / OESA-2022-1648
Summary: vte security update
Details: VTE is a terminal emulator widget for use with GTK+ 2.0. Security Fix(es): The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.(CVE-2012-2738)
References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1648, https://nvd.nist.gov/vuln/detail/CVE-2012-2738
Affected packages
Package
Name: vte
Purl: pkg:rpm/openEuler/vte&distro=openEuler-22.03-LTS
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -0.28.2-4.oe2203
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
