CVE-2008-2383
xterm - remote code execution
EPSS 5.2%
Description
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
How to fix CVE-2008-2383
To remediate CVE-2008-2383, upgrade the affected package to a fixed version below.
- Debian/xterm—upgrade to 238-2 or later
- Debian/xterm—upgrade to 222-1etch3 or later
Is CVE-2008-2383 being exploited?
Moderate — EPSS is 5.2%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (2)
- from 0, < 238-2
- from 0, < 222-1etch3