tocsin

Debian/xterm: unknown

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (

Action: Upgrade xterm to 238-2 or later.

Affected

introducedfixedlast affected
0238-2-

Fixed versions

238-2

Sources

published · modified · JSON