critical9.8
CVE-2022-41138
In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.
Impact
In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zutty Project | Zutty | before 0.13 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.gentoo.org/868495
- https://github.com/tomszilagyi/zutty/commit/bde7458c60a7bafe08bbeaafbf861eb865edfa38
- https://github.com/tomszilagyi/zutty/compare/0.12...0.13
- https://security.gentoo.org/glsa/202209-25
- https://bugs.gentoo.org/868495
- https://github.com/tomszilagyi/zutty/commit/bde7458c60a7bafe08bbeaafbf861eb865edfa38
- https://github.com/tomszilagyi/zutty/compare/0.12...0.13
- https://security.gentoo.org/glsa/202209-25