Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hanterm-XF基于循环的转义序列拒绝服务漏洞
Vulnerability Description
转义序列(escape sequence)是一系列由ASCII转义字符(0x1B)开始的字符序列,并附带特殊的参数构成,转义序列一般原用于控制显示设备如终端,现在扩展在大多数操作系统中允许多种形式的交互。转义序列可以用于更改文本属性(颜色,宽度),移动鼠标位置,重配置键盘,更新窗口标题,或者操作打印机等。 hanterm-xf终端模拟器不正确过滤部分恶意基于循环的转义序列,本地攻击者可以利用这个漏洞消耗系统大量CPU资源而产生拒绝服务。 当由DEC UDK处理器实现的模拟终端不充分处理基于循环的转义序列符
CVSS Information
N/A
Vulnerability Type
N/A