Skip to content
Sign in
8.8 High

CVE-2020-27347 In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based…

Description

In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.

Affected products and versions

Product Affected versions Fixed in
tmux 3.1 earliest → < 3.1c 3.1c
tmux 3.1 3.1b → < 3.1b-1ubuntu0.1 3.1b-1ubuntu0.1
tmux 3.0 3.0a → < 3.0a-2ubuntu0.2 3.0a-2ubuntu0.2
Track this CVE