{"id":"CVE-2020-27347","details":"In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.","modified":"2026-08-07T14:53:40.104514Z","published":"2020-11-06T03:15:17.137Z","related":["openSUSE-SU-2020:1834-1","openSUSE-SU-2024:11466-1"],"references":[{"type":"ADVISORY","url":"https://raw.githubusercontent.com/tmux/tmux/3.1c/CHANGES"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202011-10"},{"type":"FIX","url":"https://github.com/tmux/tmux/commit/a868bacb46e3c900530bed47a1c6f85b0fbe701c"},{"type":"EVIDENCE","url":"https://www.openwall.com/lists/oss-security/2020/11/05/3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tmux/tmux","events":[{"introduced":"4cb13d95bac1c7a14f216a0fd1644d8b5e389258"},{"last_affected":"25cae5d86f01d0deb050243842ed5d967b3dc411"},{"fixed":"a868bacb46e3c900530bed47a1c6f85b0fbe701c"}],"database_specific":{"cpe":"cpe:2.3:a:tmux_project:tmux:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.9"},{"last_affected":"3.1b"}],"source":["CPE_RANGE","REFERENCES"]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-27347.json","vanir_signatures_modified":"2026-08-07T14:53:40Z","vanir_signatures":[{"digest":{"function_hash":"170732737008620410805361164261211254853","length":1720},"id":"CVE-2020-27347-4e35a636","signature_type":"Function","signature_version":"v1","source":"https://github.com/tmux/tmux/commit/a868bacb46e3c900530bed47a1c6f85b0fbe701c","target":{"file":"input.c","function":"input_csi_dispatch_sgr_colon"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["240113919815530745566403619576218062793","77253474740385740734274446039228610202","174889705706748848756308818781097816062","12643815915660841977168808069864222592","125294518473082047418332633995689035105"],"threshold":0.9},"id":"CVE-2020-27347-c15704b2","signature_type":"Line","signature_version":"v1","source":"https://github.com/tmux/tmux/commit/a868bacb46e3c900530bed47a1c6f85b0fbe701c","target":{"file":"input.c"}}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}