DEBIAN-CVE-2024-37535

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2024-37535
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-37535.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2024-37535
Upstream
Published
2024-06-09T15:16:00Z
Modified
2025-10-10T19:30:50.729431Z
Severity
  • 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.

References

Affected packages

Debian:11

vte

Package

Name
vte
Purl
pkg:deb/debian/vte?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:0.*

1:0.28.2-6
1:0.28.2-6.1~exp1
1:0.28.2-6.1~exp2
1:0.28.2-6.1
1:0.28.2-7

Ecosystem specific 

{
    "urgency": "unimportant"
}

vte2.91

Package

Name
vte2.91
Purl
pkg:deb/debian/vte2.91?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.62.3-1
0.62.3-1+hurd.1
0.64.2-1
0.64.2-2
0.64.2-3
0.64.2-3+hurd.1
0.66.1-1
0.66.2-1
0.67.90-2
0.68.0-1
0.69.90-1
0.69.90-2
0.69.92-1
0.69.92-2
0.69.99-1
0.70.0-1
0.70.1-1
0.70.2-1
0.70.2-2
0.70.3-1
0.70.5-1
0.70.5-2
0.70.6-1~deb12u1
0.70.6-1
0.70.6-2~deb12u1
0.70.6-2
0.71.92-1
0.71.99-1
0.72.0-1
0.72.1-1
0.72.2-1
0.72.2-2
0.72.2-3
0.73.93-1
0.73.99-1
0.74.0-1
0.74.0-2
0.74.1-1
0.74.2-1
0.75.0-1
0.75.91-1
0.75.91-2
0.75.92-1
0.76.0-1
0.76.1-1
0.76.2-1
0.76.3-1
0.76.3-2
0.76.3-4
0.76.3-6
0.77.91-1
0.77.91-2
0.77.92-1
0.78.0-1
0.78.1-1
0.78.2-1
0.78.3-1
0.78.3-2
0.78.3-3
0.79.90-1
0.79.90-2
0.79.91-1
0.79.91-2
0.80.0-1
0.80.1-1
0.80.3-1
0.80.3-2
0.80.3-3
0.82.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12

vte

Package

Name
vte
Purl
pkg:deb/debian/vte?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:0.*

1:0.28.2-6
1:0.28.2-6.1~exp1
1:0.28.2-6.1~exp2
1:0.28.2-6.1
1:0.28.2-7

Ecosystem specific 

{
    "urgency": "unimportant"
}

vte2.91

Package

Name
vte2.91
Purl
pkg:deb/debian/vte2.91?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.70.3-1
0.70.5-1
0.70.5-2
0.70.6-1~deb12u1
0.70.6-1
0.70.6-2~deb12u1
0.70.6-2
0.71.92-1
0.71.99-1
0.72.0-1
0.72.1-1
0.72.2-1
0.72.2-2
0.72.2-3
0.73.93-1
0.73.99-1
0.74.0-1
0.74.0-2
0.74.1-1
0.74.2-1
0.75.0-1
0.75.91-1
0.75.91-2
0.75.92-1
0.76.0-1
0.76.1-1
0.76.2-1
0.76.3-1
0.76.3-2
0.76.3-4
0.76.3-6
0.77.91-1
0.77.91-2
0.77.92-1
0.78.0-1
0.78.1-1
0.78.2-1
0.78.3-1
0.78.3-2
0.78.3-3
0.79.90-1
0.79.90-2
0.79.91-1
0.79.91-2
0.80.0-1
0.80.1-1
0.80.3-1
0.80.3-2
0.80.3-3
0.82.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13

vte

Package

Name
vte
Purl
pkg:deb/debian/vte?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:0.*

1:0.28.2-7

Ecosystem specific 

{
    "urgency": "unimportant"
}

vte2.91

Package

Name
vte2.91
Purl
pkg:deb/debian/vte2.91?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.76.3-6

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14

vte

Package

Name
vte
Purl
pkg:deb/debian/vte?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:0.*

1:0.28.2-7

Ecosystem specific 

{
    "urgency": "unimportant"
}

vte2.91

Package

Name
vte2.91
Purl
pkg:deb/debian/vte2.91?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.76.3-6

Ecosystem specific 

{
    "urgency": "not yet assigned"
}