Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-27347

tmux stack buffer overflow in function input_csi_dispatch_sgr_colon

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tmux tmux

  • unspecified to < 3.1caffected

Ubuntu tmux

  • 3.1b to < 3.1b-1ubuntu0.1affected
  • 3.0a to < 3.0a-2ubuntu0.2affected

References