Skip to content
OpenAdvisories
High USN-4618-1 1 CVE

tmux vulnerability

Published Nov 5, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Sergey Nizovtsev discovered that tmux incorrectly handled some inputs.
An attacker could possibly use this issue to cause a crash or execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS tmux 3.0a-2ubuntu0.2

Vulnerabilities 1

  • High 8.8
    CVE-2020-27347 Public exploit

    tmux stack buffer overflow in function input_csi_dispatch_sgr_colon

    In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.

    Ubuntu tmux tmux tmux Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2020-27347