CVE catalog

CVE-2024-37535

VTE vulnerability

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 25, 2026

GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianvtesid1:0.28.2-7vulnerable
Debianvteforky1:0.28.2-7vulnerable
Debianvtetrixie1:0.28.2-7vulnerable
Debianvtebookworm1:0.28.2-6vulnerable
Debianvte2.91sid0.84.1-1fixed
Debianvte2.91forky0.84.1-1fixed
Debianvte2.91trixie0.80.1-1fixed
Debianvte2.91bookworm0.70.6-2~deb12u1vulnerable
UbuntuvtenobleNot reportedvulnerable
Ubuntuvte2.91nobleNot reportedvulnerable
Ubuntuvte2.91noble0.76.0-1ubuntu0.1fixed
Ubuntugir1.2-vte-2.91noble0.76.0-1ubuntu0.1fixed
Ubuntugir1.2-vte-3.91noble0.76.0-1ubuntu0.1fixed
Ubuntulibvte-2.91-0noble0.76.0-1ubuntu0.1fixed
Ubuntulibvte-2.91-commonnoble0.76.0-1ubuntu0.1fixed
Ubuntulibvte-2.91-devnoble0.76.0-1ubuntu0.1fixed
Ubuntulibvte-2.91-docnoble0.76.0-1ubuntu0.1fixed
Ubuntulibvte-2.91-gtk4-0noble0.76.0-1ubuntu0.1fixed
Ubuntulibvte-2.91-gtk4-devnoble0.76.0-1ubuntu0.1fixed
Ubuntulibvte-2.91-gtk4-docnoble0.76.0-1ubuntu0.1fixed
Ubuntuvte2.9120.040.58.2-1ubuntu2vulnerable
Ubuntuvte2.9120.040.59.91-0ubuntu1vulnerable
Ubuntuvte2.9120.040.59.91-0ubuntu2vulnerable
Ubuntuvte2.9120.040.60.0-2ubuntu2vulnerable
Ubuntuvte2.9120.040.60.1-1ubuntu1vulnerable
Ubuntuvte2.9120.040.60.3-0ubuntu1~20.04vulnerable
Ubuntuvte2.9120.040.60.3-0ubuntu1~20.5fixed
Ubuntuvte2.9122.040.64.2-1ubuntu1vulnerable
Ubuntuvte2.9122.040.64.2-3vulnerable
Ubuntuvte2.9122.040.66.1-1vulnerable
Ubuntuvte2.9122.040.66.2-1vulnerable
Ubuntuvte2.9122.040.66.2-1build1vulnerable
Ubuntuvte2.9122.040.67.90-2vulnerable
Ubuntuvte2.9122.040.68.0-1vulnerable
Ubuntuvte2.9122.040.68.0-1ubuntu0.1fixed
Ubuntuvte2.9124.040.74.0-2vulnerable
Ubuntuvte2.9124.040.74.1-1vulnerable
Ubuntuvte2.9124.040.74.1-1build1vulnerable
Ubuntuvte2.9124.040.74.2-1vulnerable
Ubuntuvte2.9124.040.75.91-2vulnerable
Ubuntuvte2.9124.040.75.92-1build1vulnerable
Ubuntuvte2.9124.040.75.92-1build2vulnerable
Ubuntuvte2.9124.040.76.0-1vulnerable
Ubuntuvte2.9124.040.76.0-1ubuntu0.1fixed
Ubuntuvte2.9116.040.40.2-1ubuntu3vulnerable
Ubuntuvte2.9116.040.42.1-1ubuntu1vulnerable
Ubuntuvte2.9116.040.42.1-1ubuntu2vulnerable
Ubuntuvte2.9116.040.42.1-2ubuntu1vulnerable
Ubuntuvte2.9116.040.42.4-1ubuntu1vulnerable
Ubuntuvte2.9116.040.42.4-1ubuntu2vulnerable
Ubuntuvte2.9116.040.42.5-1ubuntu1vulnerable
Ubuntuvte2.9118.040.48.4-0ubuntu1vulnerable
Ubuntuvte2.9118.040.50.2-4ubuntu2vulnerable
Ubuntuvte2.9118.040.51.90-1ubuntu1vulnerable
Ubuntuvte2.9118.040.51.92-1ubuntu1vulnerable
Ubuntuvte2.9118.040.52.0-1ubuntu1vulnerable
Ubuntuvte2.9118.040.52.0-1ubuntu2vulnerable
Ubuntuvte2.9118.040.52.1-1ubuntu1vulnerable
Ubuntuvte2.9118.040.52.2-1ubuntu1~18.04.1vulnerable
Ubuntuvte2.9118.040.52.2-1ubuntu1~18.04.2vulnerable
Ubuntuvte2.9120.040.58.2-1ubuntu2vulnerable
Ubuntuvte2.9120.040.59.91-0ubuntu1vulnerable
Ubuntuvte2.9120.040.59.91-0ubuntu2vulnerable
Ubuntuvte2.9120.040.60.0-2ubuntu2vulnerable
Ubuntuvte2.9120.040.60.1-1ubuntu1vulnerable
Ubuntuvte2.9120.040.60.3-0ubuntu1~20.04vulnerable
Ubuntuvte2.9120.040.60.3-0ubuntu1~20.5fixed
Ubuntuvte2.9122.040.64.2-1ubuntu1vulnerable
Ubuntuvte2.9122.040.64.2-3vulnerable
Ubuntuvte2.9122.040.66.1-1vulnerable
Ubuntuvte2.9122.040.66.2-1vulnerable
Ubuntuvte2.9122.040.66.2-1build1vulnerable
Ubuntuvte2.9122.040.67.90-2vulnerable
Ubuntuvte2.9122.040.68.0-1vulnerable
Ubuntuvte2.9122.040.68.0-1ubuntu0.1fixed
Ubuntuvte2.9124.040.74.0-2vulnerable
Ubuntuvte2.9124.040.74.1-1vulnerable
Ubuntuvte2.9124.040.74.1-1build1vulnerable
Ubuntuvte2.9124.040.74.2-1vulnerable
Ubuntuvte2.9124.040.75.91-2vulnerable
Ubuntuvte2.9124.040.75.92-1build1vulnerable
Ubuntuvte2.9124.040.75.92-1build2vulnerable
Ubuntuvte2.9124.040.76.0-1vulnerable
Ubuntuvte2.9124.040.76.0-1ubuntu0.1fixed
Susevtelinux enterprise module for basesystem 15 sp50.66.2-150400.3.5.1fixed
Susevtelinux enterprise module for desktop applications 15 sp50.66.2-150400.3.5.1fixed
Susevtelinux enterprise high performance computing 15 sp4-espos0.66.2-150400.3.5.1fixed
Susevtelinux enterprise high performance computing 15 sp4-ltss0.66.2-150400.3.5.1fixed
Susevtelinux enterprise server 15 sp4-ltss0.66.2-150400.3.5.1fixed
Susevtelinux enterprise server for sap applications 15 sp40.66.2-150400.3.5.1fixed
Susevtemanager proxy 4.30.66.2-150400.3.5.1fixed
Susevtemanager server 4.30.66.2-150400.3.5.1fixed
Opensusevteleap 15.50.66.2-150400.3.5.1fixed
Susevtelinux enterprise high performance computing 15 sp2-ltss0.58.3-150200.3.3.1fixed
Susevtelinux enterprise high performance computing 15 sp3-ltss0.58.3-150200.3.3.1fixed
Susevtelinux enterprise server 15 sp2-ltss0.58.3-150200.3.3.1fixed
Susevtelinux enterprise server 15 sp3-ltss0.58.3-150200.3.3.1fixed
Susevtelinux enterprise server for sap applications 15 sp20.58.3-150200.3.3.1fixed
Susevtelinux enterprise server for sap applications 15 sp30.58.3-150200.3.3.1fixed
Susevteenterprise storage 7.10.58.3-150200.3.3.1fixed
Opensusevtetumbleweed0.76.3-3.1fixed
Susevtelinux enterprise module for basesystem 15 sp60.74.2-150600.3.3.1fixed
Susevtelinux enterprise module for desktop applications 15 sp60.74.2-150600.3.3.1fixed
Opensusevteleap 15.60.74.2-150600.3.3.1fixed
Susevtelinux enterprise software development kit 12 sp50.44.2-9.6.1fixed
Susevtelinux enterprise server 12 sp50.44.2-9.6.1fixed
Susevtelinux enterprise server for sap applications 12 sp50.44.2-9.6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianvtesourcesid(unfixed)unimportantNot reported[1081907]
Debianvtesourceforky(unfixed)unimportantNot reported[1081907]
Debianvtesourcetrixie(unfixed)unimportantNot reported[1081907]
Debianvtesourcebookworm(unfixed)unimportantNot reported[1081907]
Debianvte2.91sourcesid0.76.3-6not yet assignedNot reportedNot reported
Debianvte2.91sourceforky0.76.3-6not yet assignedNot reportedNot reported
Debianvte2.91sourcetrixie0.76.3-6not yet assignedNot reportedNot reported
Debianvte2.91sourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntuvte2.91debnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntugir1.2-vte-2.91debnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntugir1.2-vte-3.91debnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibvte-2.91-0debnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibvte-2.91-commondebnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibvte-2.91-devdebnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibvte-2.91-docdebnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibvte-2.91-gtk4-0debnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibvte-2.91-gtk4-devdebnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibvte-2.91-gtk4-docdebnoble0.76.0-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntuvte2.91deb20.040.60.3-0ubuntu1~20.5Not reportedUSN-6833-1Not reported
Ubuntuvte2.91deb22.040.68.0-1ubuntu0.1Not reportedUSN-6833-1Not reported
Ubuntuvte2.91deb24.040.76.0-1ubuntu0.1Not reportedUSN-6833-1Not reported
Ubuntuvte2.91deb20.040.60.3-0ubuntu1~20.5Not reportedUBUNTU-CVE-2024-37535Not reported
Ubuntuvte2.91deb22.040.68.0-1ubuntu0.1Not reportedUBUNTU-CVE-2024-37535Not reported
Ubuntuvte2.91deb24.040.76.0-1ubuntu0.1Not reportedUBUNTU-CVE-2024-37535Not reported
Susevterpmlinux enterprise module for basesystem 15 sp50.66.2-150400.3.5.1Not reportedSUSE-SU-2024:2180-1Not reported
Susevterpmlinux enterprise module for desktop applications 15 sp50.66.2-150400.3.5.1Not reportedSUSE-SU-2024:2180-1Not reported
Susevterpmlinux enterprise high performance computing 15 sp4-espos0.66.2-150400.3.5.1Not reportedSUSE-SU-2024:2180-1Not reported
Susevterpmlinux enterprise high performance computing 15 sp4-ltss0.66.2-150400.3.5.1Not reportedSUSE-SU-2024:2180-1Not reported
Susevterpmlinux enterprise server 15 sp4-ltss0.66.2-150400.3.5.1Not reportedSUSE-SU-2024:2180-1Not reported
Susevterpmlinux enterprise server for sap applications 15 sp40.66.2-150400.3.5.1Not reportedSUSE-SU-2024:2180-1Not reported
Susevterpmmanager proxy 4.30.66.2-150400.3.5.1Not reportedSUSE-SU-2024:2180-1Not reported
Susevterpmmanager server 4.30.66.2-150400.3.5.1Not reportedSUSE-SU-2024:2180-1Not reported
Opensusevterpmleap 15.50.66.2-150400.3.5.1Not reportedSUSE-SU-2024:2180-1Not reported
Susevterpmlinux enterprise high performance computing 15 sp2-ltss0.58.3-150200.3.3.1Not reportedSUSE-SU-2024:2152-1Not reported
Susevterpmlinux enterprise high performance computing 15 sp3-ltss0.58.3-150200.3.3.1Not reportedSUSE-SU-2024:2152-1Not reported
Susevterpmlinux enterprise server 15 sp2-ltss0.58.3-150200.3.3.1Not reportedSUSE-SU-2024:2152-1Not reported
Susevterpmlinux enterprise server 15 sp3-ltss0.58.3-150200.3.3.1Not reportedSUSE-SU-2024:2152-1Not reported
Susevterpmlinux enterprise server for sap applications 15 sp20.58.3-150200.3.3.1Not reportedSUSE-SU-2024:2152-1Not reported
Susevterpmlinux enterprise server for sap applications 15 sp30.58.3-150200.3.3.1Not reportedSUSE-SU-2024:2152-1Not reported
Susevterpmenterprise storage 7.10.58.3-150200.3.3.1Not reportedSUSE-SU-2024:2152-1Not reported
Opensusevterpmtumbleweed0.76.3-3.1Not reportedOPENSUSE-SU-2024:14284-1Not reported
Susevterpmlinux enterprise module for basesystem 15 sp60.74.2-150600.3.3.1Not reportedSUSE-SU-2024:2153-1Not reported
Susevterpmlinux enterprise module for desktop applications 15 sp60.74.2-150600.3.3.1Not reportedSUSE-SU-2024:2153-1Not reported
Opensusevterpmleap 15.60.74.2-150600.3.3.1Not reportedSUSE-SU-2024:2153-1Not reported
Susevterpmlinux enterprise software development kit 12 sp50.44.2-9.6.1Not reportedSUSE-SU-2024:2151-1Not reported
Susevterpmlinux enterprise server 12 sp50.44.2-9.6.1Not reportedSUSE-SU-2024:2151-1Not reported
Susevterpmlinux enterprise server for sap applications 12 sp50.44.2-9.6.1Not reportedSUSE-SU-2024:2151-1Not reported

[Debian bug #1081907]

Notes

[bookworm] vte2.91: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [gir1.2-vte-2.91]Affected

    Source package: [vte2.91]

    Details (2)
    • 0.70.6-2~deb12u1 · amd64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

    • 0.70.6-2~deb12u1 · arm64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

  • [gir1.2-vte-3.91]Affected

    Source package: [vte2.91]

    Details (2)
    • 0.70.6-2~deb12u1 · amd64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

    • 0.70.6-2~deb12u1 · arm64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

  • [libvte-2.91-0]Affected

    Source package: [vte2.91]

    Details (2)
    • 0.70.6-2~deb12u1 · amd64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

    • 0.70.6-2~deb12u1 · arm64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

  • Source package: [vte2.91]

    Details (2)
    • 0.70.6-2~deb12u1 · amd64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

    • 0.70.6-2~deb12u1 · arm64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

  • [libvte-2.91-dev]Affected

    Source package: [vte2.91]

    Details (2)
    • 0.70.6-2~deb12u1 · amd64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

    • 0.70.6-2~deb12u1 · arm64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

  • [libvte-2.91-doc]Affected

    Source package: [vte2.91]

    Details (2)
    • 0.70.6-2~deb12u1 · all · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

    • 0.70.6-2~deb12u1 · all · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

  • Source package: [vte2.91]

    Details (2)
    • 0.70.6-2~deb12u1 · amd64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

    • 0.70.6-2~deb12u1 · arm64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

  • Source package: [vte2.91]

    Details (2)
    • 0.70.6-2~deb12u1 · amd64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

    • 0.70.6-2~deb12u1 · arm64 · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

  • Source package: [vte2.91]

    Details (2)
    • 0.70.6-2~deb12u1 · all · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

    • 0.70.6-2~deb12u1 · all · bookworm

      Affected

      usn · vte2.91 · debian · bookworm; usn · vte2.91 · debian · 12

  • [libvte9]Affected

    Source package: [vte]

    Details (2)
    • 1:0.28.2-6+b1 · amd64 · bookworm

      Affected

      usn · vte · debian · bookworm; usn · vte · debian · 12

    • 1:0.28.2-6+b1 · arm64 · bookworm

      Affected

      usn · vte · debian · bookworm; usn · vte · debian · 12

  • [libvte-common]Affected

    Source package: [vte]

    Details (2)
    • 1:0.28.2-6 · all · bookworm

      Affected

      usn · vte · debian · bookworm; usn · vte · debian · 12

    • 1:0.28.2-6 · all · bookworm

      Affected

      usn · vte · debian · bookworm; usn · vte · debian · 12

  • [libvte-dev]Affected

    Source package: [vte]

    Details (2)
    • 1:0.28.2-6+b1 · amd64 · bookworm

      Affected

      usn · vte · debian · bookworm; usn · vte · debian · 12

    • 1:0.28.2-6+b1 · arm64 · bookworm

      Affected

      usn · vte · debian · bookworm; usn · vte · debian · 12

[Debian 13 (Trixie)]

  • [libvte9t64]Affected

    Source package: [vte]

    Details (2)
    • 1:0.28.2-7 · amd64 · trixie

      Affected

      usn · vte · debian · 13

    • 1:0.28.2-7 · arm64 · trixie

      Affected

      usn · vte · debian · 13

  • [libvte-common]Affected

    Source package: [vte]

    Details (2)
    • 1:0.28.2-7 · all · trixie

      Affected

      usn · vte · debian · 13

    • 1:0.28.2-7 · all · trixie

      Affected

      usn · vte · debian · 13

  • [libvte-dev]Affected

    Source package: [vte]

    Details (2)
    • 1:0.28.2-7 · amd64 · trixie

      Affected

      usn · vte · debian · 13

    • 1:0.28.2-7 · arm64 · trixie

      Affected

      usn · vte · debian · 13

[openSUSE Tumbleweed]

  • [libvte-2_91-0]Unknown

    Source package: [vte]

    Details (1)
    • 0.84.1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 0.76.3-3.1

      Version impact unknown

      usn · vte · opensuse · tumbleweed

  • Source package: [vte]

    Details (1)
    • 0.84.1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 0.76.3-3.1

      Version impact unknown

      usn · vte · opensuse · tumbleweed

  • Source package: [vte]

    Details (1)
    • 0.84.1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 0.76.3-3.1

      Version impact unknown

      usn · vte · opensuse · tumbleweed

  • [vte-devel]Unknown

    Source package: [vte]

    Details (1)
    • 0.84.1-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 0.76.3-3.1

      Version impact unknown

      usn · vte · opensuse · tumbleweed

  • [vte-lang]Unknown

    Source package: [vte]

    Details (1)
    • 0.84.1-1.1 · noarch · tumbleweed

      Unknown · Fixed: 0.76.3-3.1

      Version impact unknown

      usn · vte · opensuse · tumbleweed

Next results

Observed:

References