Critical Code Execution Vulnerability in xterm Package
Summary
RLSA-2025:7427: Low: xterm security update. Affects xterm versions < 0:366-10.el9_6. Fixed in 0:366-10.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
xterm is a terminal emulator for the X Window System, providing DEC VT102 and Tektronix 4014 compatible terminals for applications that cannot directly utilize the window system. It is widely used in various Linux distributions, including Rocky Linux, for its robust features and compatibility. However, it has been identified to have a security vulnerability that can lead to code execution under certain conditions.
Vulnerability Detail
The vulnerability, identified as CVE-2022-45063, allows for code execution via OSC 50 input sequences. This means that an attacker could potentially exploit this vulnerability to execute arbitrary code on a user's system by sending specially crafted input sequences to the xterm terminal. The implications of this vulnerability are significant, as it could lead to unauthorized access and control over the affected system, making it crucial for users to address this issue promptly.
How To Fix
Minimum fixed version
0:366-10.el9_6
This is the first release that contains the fix.
sudo dnf update xtermTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using xterm or restrict the input sequences that can be processed until the package is updated. This may involve configuring terminal settings to limit the types of input accepted.
Conclusion
The xterm package has a critical vulnerability (CVE-2022-45063) that allows for code execution via OSC 50 input sequences. Users are strongly advised to update to the patched version to mitigate risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for xterm →
FAQ
CVE-2022-45063 is a vulnerability in the xterm package that allows for code execution through malicious OSC 50 input sequences.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include unauthorized code execution, which can lead to system compromise and data breaches.
Yes, a patched version of the xterm package is available as '0:366-10.el9_6'.
If immediate updates are not possible, consider using alternative terminal emulators or restricting input sequences until the update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for xterm.
