In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2024/06/17/1 | Mailing List Third Party Advisory |
| https://gitlab.com/gnachman/iterm2/-/commit/f1e89f78dd72dcac3ba66d3d6f93db3f7f649219 | Patch |
| https://gitlab.com/gnachman/iterm2/-/tags/v3.5.2 | Release Notes |
| https://iterm2.com/downloads.html | Product |
| https://www.openwall.com/lists/oss-security/2024/06/15/1 | Mailing List |
| http://www.openwall.com/lists/oss-security/2024/06/17/1 | Mailing List Third Party Advisory |
| https://www.openwall.com/lists/oss-security/2024/06/15/1 | Mailing List |
| https://iterm2.com/downloads.html | Product |
| https://gitlab.com/gnachman/iterm2/-/tags/v3.5.2 | Release Notes |
| https://gitlab.com/gnachman/iterm2/-/commit/f1e89f78dd72dcac3ba66d3d6f93db3f7f649219 | Patch |
Configurations
History
18 Jun 2025, 16:40
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:iterm2:iterm2:*:*:*:*:*:*:*:* | |
| First Time |
Iterm2
Iterm2 iterm2 |
|
| References | () https://iterm2.com/downloads.html - Product | |
| References | () https://www.openwall.com/lists/oss-security/2024/06/15/1 - Mailing List | |
| References | () http://www.openwall.com/lists/oss-security/2024/06/17/1 - Mailing List, Third Party Advisory | |
| References | () https://gitlab.com/gnachman/iterm2/-/commit/f1e89f78dd72dcac3ba66d3d6f93db3f7f649219 - Patch | |
| References | () https://gitlab.com/gnachman/iterm2/-/tags/v3.5.2 - Release Notes |
17 Jun 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Jun 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-16 01:15
Updated : 2025-06-18 16:40
NVD link : CVE-2024-38395
Mitre link : CVE-2024-38395
JSON object : View
Products Affected
iterm2
- iterm2
CWE
No CWE.