CVE-2020-27347

HIGH LAB

tmux 2.9-3.1b - Stack-based Buffer Overflow in input_csi_dispatch_sgr_colon

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-27347. PoCs published by lucadibello.

AI-analyzed exploit summary This repository contains a detailed writeup and fuzzing analysis for tmux, including a PoC for CVE-2020-27347. It focuses on enhancing fuzzing techniques and analyzing a known stack-based buffer overflow vulnerability.

Description

In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.

Exploits (1)

nomisec WRITEUP 1 stars

by lucadibello · poc

https://github.com/lucadibello/tmux-fuzzing

View Code ZIP pw:eip

This repository contains a detailed writeup and fuzzing analysis for tmux, including a PoC for CVE-2020-27347. It focuses on enhancing fuzzing techniques and analyzing a known stack-based buffer overflow vulnerability.

Classification

Writeup 90%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: tmux (version not specified)

No auth needed

Prerequisites: tmux installation · Docker environment for PoC execution

MITRE ATT&CK