Bug 2292317 (CVE-2024-37535)

Summary:	CVE-2024-37535 vte: Denial of service via window resize escape sequence
Product:	[Other] Security Response	Reporter:	Pedro Sampaio <psampaio>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	vte 0.76.3	Doc Type:	---
Doc Text:	A flaw was found in gnome VTE. This flaw allows an attacker to cause a denial of service via a window resize escape sequence.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2292318, 2292319, 2292320
Bug Blocks:	2292322

Description Pedro Sampaio 2024-06-14 03:15:35 UTC

GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.

References:

http://www.openwall.com/lists/oss-security/2024/06/09/1
http://www.openwall.com/lists/oss-security/2024/06/09/2
https://gitlab.gnome.org/GNOME/vte/-/issues/2786
https://gitlab.gnome.org/GNOME/vte/-/tags/0.76.3

Comment 1 Pedro Sampaio 2024-06-14 03:15:47 UTC

Created vte tracking bugs for this issue:

Affects: fedora-all [bug 2292318]

Comment 2 Pedro Sampaio 2024-06-14 03:17:23 UTC

Created vte tracking bugs for this issue:

Affects: epel-all [bug 2292319]


Created vte291 tracking bugs for this issue:

Affects: fedora-all [bug 2292320]