LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices

Reply
 
Search this Thread
Old 08-03-2012, 03:57 PM   #1
mancha
Member
 
Registered: Aug 2012
Posts: 279

Rep: Reputation: Disabled
[BUG] vte


vte, as packaged by Slackware through -current, has a bug which allows for a local DoS. Any program built against libvte (such as mosh or Xfce's Terminal) is vulnerable. Upstream corrected this starting with vte 0.32+ so I backported the fix for Slackware and provided Pat a copy.

To test, open Xfce's Terminal (/usr/bin/Terminal) and type:

Code:
echo -en "\e[9999999999P"
Watch your CPU go crazy in conky or gkrellm. /bin/kill that terminal to stop the madness.

An official Slackware patch is probably forthcoming. However, for the impatient among us, here's my fix. Just apply it to vte and rebuild.

-mancha
Attached Files
File Type: txt CVE-2012-2738.txt (2.7 KB, 20 views)
 
Old 08-04-2012, 06:19 AM   #2
mancha
Member
 
Registered: Aug 2012
Posts: 279

Original Poster
Rep: Reputation: Disabled
It wasn't clear in my last post that this patch applies against vte 0.28.x (as in -current). If demand exists, I guess I could work on patches back to 13.37 or maybe 13.1.

-mancha
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Dependencies Python vte bindings spiky0011 Linux From Scratch 4 05-15-2011 06:27 AM
Python using compiled VTE library sadarax Programming 4 07-23-2009 07:32 PM
VTE detection error _ AsiF Linux - Software 2 03-07-2008 08:04 PM
Unable to compile vte-0.11.10 powerloony Linux - Software 2 01-25-2005 04:56 AM
Trouble compiling vte-0.11.10 emu_123 Linux - Software 1 12-07-2003 12:41 AM


All times are GMT -5. The time now is 03:59 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration