USN-8078-1 — zutty vulnerability

Summary

Carter Sande discovered that Zutty did not correctly echo invalid input to
the console on DECRQSS. An attacker could possibly use this issue to
execute arbitrary commands.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS	zutty	0.11.2.20220109.192032+dfsg1-1ubuntu0.1~esm1

Vulnerabilities 1

Critical 9.8

CVE-2022-41138

In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.

zutty zutty Debian Ubuntu

Sep 20, 2022

References

report
https://ubuntu.com/security/CVE-2022-41138

zutty vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.

References