CVE:CVE-2021-27135
CNNVD:CNNVD-202102-961
Xterm.js是一款使用TypeScript编写的前端组件。该产品允许应用程序在浏览器中为用户提供功能齐全的终端。
Xterm中存在输入验证错误漏洞，该漏洞源于允许远程攻击者通过特制的UTF-8字符序列造成拒绝服务（分段错误）或可能具有未指明的其他影响。
solution:Upgrade invisible-island xterm to a higher version than 366,and avoid the version (,366); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33