CVE-2022-24130

Name of the Vulnerable Software and Affected Versions xterm versions through Patch 370

Description The issue is related to a buffer overflow in the set sixel function within the graphics sixel.c component of the xterm terminal emulator. This occurs when Sixel support is enabled and an attacker provides crafted text. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For xterm versions through Patch 370, apply Patch 370 to resolve the issue. As a temporary workaround, consider disabling Sixel support until the patch is applied. Restrict access to the set sixel function in the graphics sixel.c component to minimize the risk of exploitation. Avoid using crafted text that could trigger the buffer overflow in the affected set sixel function.