Summary
Siddharth Dushantha discovered that VTE incorrectly handled large window
resize escape sequences. An attacker could possibly use this issue to
consume resources, leading to a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | vte2.91 | 0.60.3-0ubuntu1~20.5 |
| Ubuntu · 22.04 LTS 22.04:LTS | vte2.91 | 0.68.0-1ubuntu0.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | vte2.91 | 0.76.0-1ubuntu0.1 |
Vulnerabilities 1
-
Medium 4.4
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape…
References
-
report
https://ubuntu.com/security/CVE-2024-37535