Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
vte291 may crash on window resize
published 2 years ago
Summary
The vte291 component used in Azure can be forced to consume excessive memory when a window is resized, potentially causing the application to stop responding. This happens because the software mishandles a special resize command. Updating to version 0.74.2-6 or later resolves the issue.
What to do
- Update azure vte291 to version 0.74.2-6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | vte291 |
< 0.74.2-6 Fix: upgrade to 0.74.2-6
|
Original advisory text
CVE-2024-37535 affecting package vte291 for versions less than 0.74.2-6
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.
References
Timeline
Published9 Jun 2024
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-43167 · OSV
Track software like this
Free during beta