CVE-2021-27135

xterm: The xterm program is a terminal emulator for the X Window System

CVE-2021-27135 is fixed in 2 products on 1 platform, first by xterm 330-1ubuntu2.2, released February 10, 2021. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
9.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0786
94th percentile

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. Security Fix(es): * xterm: crash when processing combining characters (CVE-2021-27135) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
xterm · RHEL 8 0:331-1.el8_3.2 RHSA-2021:0611 Feb 18, 2021
xterm · Ubuntu 18.04.6 LTS (bionic) 330-1ubuntu2.2 xterm 330-1ubuntu2.2 Feb 10, 2021
xterm · Ubuntu 20.04 LTS (focal) 353-1ubuntu1.20.04.2 xterm 353-1ubuntu1.20.04.2 Feb 10, 2021
xterm · ol 8 0:331-1.el8_3.2 ELSA-2021-0611 Feb 18, 2021
xterm-resize · RHEL 8 0:331-1.el8_3.2 RHSA-2021:0611 Feb 18, 2021
xterm-resize · ol 8 0:331-1.el8_3.2 ELSA-2021-0611 Feb 18, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.