The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:0900-1 advisory.

  - xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service     (segmentation fault) via a crafted UTF-8 combining character sequence. (CVE-2021-27135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0010 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-27135:
    xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service     (segmentation fault) via a crafted UTF-8 combining character sequence.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202208-22 (xterm: Multiple Vulnerabilities)

  - xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service     (segmentation fault) via a crafted UTF-8 combining character sequence. (CVE-2021-27135)

  - xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in     set_sixel in graphics_sixel.c via crafted text. (CVE-2022-24130)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has xterm packages installed that are affected by a vulnerability:

  - xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service     (segmentation fault) via a crafted UTF-8 combining character sequence. (CVE-2021-27135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-9066 advisory.

    [253-1.0.1]
    - fix xutf8.h to work with up-to-date Xlib
    - fix crash in combining character support {CVE-2021-27135} [orabug 32496959]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the xterm package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - xterm before Patch #366 allows remote attackers to     execute arbitrary code or cause a denial of service     (segmentation fault) via a crafted UTF-8 combining     character sequence.(CVE-2021-27135)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0617 advisory.

  - xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service     (segmentation fault) via a crafted UTF-8 combining character sequence. (CVE-2021-27135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 / SLES_SAP11 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:14747-1 advisory.

    - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. (bsc#1182091)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2011-1 advisory.

    - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. (bsc#1182091)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1518:01 advisory.

    * xterm: crash when processing combining characters (CVE-2021-27135)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
151060	openSUSE 15 Security Update : xterm (openSUSE-SU-2021:0900-1)	Nessus	SuSE Local Security Checks	2021/6/28	2021/6/28	critical
236452	Alibaba Cloud Linux 3 : 0010: xterm (ALINUX3-SA-2021:0010)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
164111	GLSA-202208-22 : xterm: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2022/8/15	2023/10/16	critical
154547	NewStart CGSL MAIN 6.02 : xterm Vulnerability (NS-SA-2021-0121)	Nessus	NewStart CGSL Local Security Checks	2021/10/27	2021/10/27	critical
147767	Oracle Linux 6 : xterm (ELSA-2021-9066)	Nessus	Oracle Linux Local Security Checks	2021/3/15	2024/10/22	critical
149191	EulerOS 2.0 SP3 : xterm (EulerOS-SA-2021-1864)	Nessus	Huawei Local Security Checks	2021/4/30	2024/1/2	critical
149505	CentOS 7 : xterm (RHSA-2021:0617)	Nessus	CentOS Local Security Checks	2021/5/14	2024/10/9	critical
150888	SUSE SLES11 Security Update : xterm (SUSE-SU-2021:14747-1)	Nessus	SuSE Local Security Checks	2021/6/21	2026/6/25	critical
150912	SUSE SLED15 / SLES15 Security Update : xterm (SUSE-SU-2021:2011-1)	Nessus	SuSE Local Security Checks	2021/6/21	2026/6/25	critical
294589	MiracleLinux 8 : xterm-331-1.el8.2 (AXSA:2021-1518:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical