Critical severity9.8NVD Advisory· Published Aug 14, 2023· Updated Jun 17, 2026
CVE-2023-40359
CVE-2023-40359
Description
xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- osv-coords7 versionspkg:rpm/opensuse/xterm&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/xterm&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/xterm&distro=openSUSE%20Tumbleweedpkg:rpm/suse/xterm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/xterm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/xterm&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/xterm&distro=SUSE%20Manager%20Server%204.2
< 330-150200.11.12.1+ 6 more
- (no CPE)range: < 330-150200.11.12.1
- (no CPE)range: < 330-150200.11.12.1
- (no CPE)range: < 384-2.1
- (no CPE)range: < 330-150200.11.12.1
- (no CPE)range: < 330-150200.11.12.1
- (no CPE)range: < 330-150200.11.12.1
- (no CPE)range: < 330-150200.11.12.1
Patches
Vulnerability mechanics
References
1- invisible-island.net/xterm/xterm.log.htmlnvdRelease Notes
News mentions
0No linked articles in our index yet.