Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses

Filter by:

With package: termite

Found 1 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2018-25253

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 week, 6 days ago

Termite 3.4 Denial of Service via Settings Buffer Overflow

Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field that allows local attackers to cause a denial of service by supplying an excessively long string. Attackers can paste a 2000-byte payload into the Settings User interface language field to crash the application.

References

ExploitDB-45453 exploit
Official Product Homepage product
Product Reference product
VulnCheck Advisory: Termite 3.4 Denial of Service via Settings Buffer Overflow third-party-advisory

Affected products

Termite

==3.4

Matching in nixpkgs

pkgs.termite

Simple VTE-based terminal

nixos-unstable 15
- nixpkgs-unstable 15
- nixos-unstable-small 15
nixos-25.11 15
- nixos-25.11-small 15
- nixpkgs-25.11-darwin 15

pkgs.termite-unwrapped

Simple VTE-based terminal

nixos-unstable 15
- nixpkgs-unstable 15
- nixos-unstable-small 15
nixos-25.11 15
- nixos-25.11-small 15
- nixpkgs-25.11-darwin 15

Package maintainers

@k0ral Koral <koral@mailoo.org>

1