8.8 High

CVE-2020-27347 In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based…

Description

In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.

Affected products and versions

Product	Affected versions	Fixed in
tmux 3.1	earliest → < 3.1c	3.1c
tmux 3.1	3.1b → < 3.1b-1ubuntu0.1	3.1b-1ubuntu0.1
tmux 3.0	3.0a → < 3.0a-2ubuntu0.2	3.0a-2ubuntu0.2

References

github.com github.com
www.openwall.com www.openwall.com
GLSA-202011-10 security.gentoo.org
raw.githubusercontent.com raw.githubusercontent.com

Timeline

Published November 6, 2020
Last modified September 17, 2024

Track this CVE