CVE-2012-2738

medium · 4

The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.

CVSS

11.2%

EPSS (exploit prob.)

96th

EPSS percentile

2012-07-22

Published

AV:N/AC:L/Au:S/C:N/I:N/A:P

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
nalin_dahyabhai	vte	<= 0.32.1
nalin_dahyabhai	vte	0.9.0
nalin_dahyabhai	vte	0.9.2
nalin_dahyabhai	vte	0.10
nalin_dahyabhai	vte	0.10.1
nalin_dahyabhai	vte	0.10.2
nalin_dahyabhai	vte	0.10.3
nalin_dahyabhai	vte	0.10.4
nalin_dahyabhai	vte	0.10.5
nalin_dahyabhai	vte	0.10.6
nalin_dahyabhai	vte	0.10.7
nalin_dahyabhai	vte	0.10.8
nalin_dahyabhai	vte	0.10.9
nalin_dahyabhai	vte	0.10.10
nalin_dahyabhai	vte	0.10.11
nalin_dahyabhai	vte	0.10.12
nalin_dahyabhai	vte	0.10.13
nalin_dahyabhai	vte	0.10.14
nalin_dahyabhai	vte	0.10.15
nalin_dahyabhai	vte	0.10.16
nalin_dahyabhai	vte	0.10.17
nalin_dahyabhai	vte	0.10.19
nalin_dahyabhai	vte	0.10.20
nalin_dahyabhai	vte	0.10.21
nalin_dahyabhai	vte	0.10.22
nalin_dahyabhai	vte	0.10.23
nalin_dahyabhai	vte	0.10.25
nalin_dahyabhai	vte	0.10.26
nalin_dahyabhai	vte	0.10.27
nalin_dahyabhai	vte	0.10.28
nalin_dahyabhai	vte	0.10.29
nalin_dahyabhai	vte	0.11.0
nalin_dahyabhai	vte	0.11.1
nalin_dahyabhai	vte	0.11.2
nalin_dahyabhai	vte	0.11.3
nalin_dahyabhai	vte	0.11.4
nalin_dahyabhai	vte	0.11.5
nalin_dahyabhai	vte	0.11.6
nalin_dahyabhai	vte	0.11.7
nalin_dahyabhai	vte	0.11.8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-2738