Critical Security Update for xterm: Addressing CVE-2022-24130 Vulnerability
Summary
RHSA-2025:14075: Red Hat Security Advisory: xterm security update. Affects xterm versions < 0:366-12.el9_6. Fixed in 0:366-12.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
xterm is a terminal emulator for the X Window System, providing a command-line interface for users to interact with the operating system. It supports various features such as multiple windows, text selection, and customizable appearances. However, it has been identified to have a security vulnerability that could potentially allow unauthorized access or denial of service.
Vulnerability Detail
The vulnerability, identified as CVE-2022-24130, originates from improper handling of certain inputs in xterm. This flaw could be exploited by an attacker to execute arbitrary code or cause a denial of service, leading to system instability. The vulnerability has a CVSS score of 5.5, indicating a moderate severity level, and it affects multiple versions of the xterm package.
How To Fix
Minimum fixed version
0:366-12.el9_6
This is the first release that contains the fix.
sudo dnf update xtermTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of xterm or switch to alternative terminal emulators until the package is updated. Additionally, disabling certain features that may trigger the vulnerability can provide a short-term solution.
Conclusion
The xterm package has a critical security vulnerability (CVE-2022-24130) that requires immediate attention. Users are advised to update to the latest patched version to mitigate potential risks. Temporary workarounds are available, but updating is the best long-term solution.
See every vulnerability recorded for xterm →
FAQ
CVE-2022-24130 is a security vulnerability in the xterm package that could allow unauthorized access or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If immediate updates are not possible, consider using alternative terminal emulators or limiting the use of xterm until the patch is applied.
The vulnerability has a CVSS score of 5.5, indicating a moderate severity level.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2025:14075.json.
Related vulnerabilities
Recent vulnerabilities recorded for xterm.
