ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncurses-c++-libsUpgrade ncursesUpgrade ncurses-termUpgrade ncurses-libsUpgrade ncurses-base | Sep 25, 2023 | Apr 14, 2023 |
| Alpine Linux | — | Upgrade ncurses | Mar 26, 2024 | Apr 14, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ncurses-libsUpgrade ncurses-debuginfoUpgrade ncurses-compat-libsUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncurses-staticUpgrade ncurses-devel | Jul 4, 2023 | Apr 14, 2023 |
| Amazon_linux | — | Upgrade ncurses | Jul 20, 2023 | Apr 14, 2023 |
| Amazon_linux_2023 | — | Upgrade ncurses-termUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-compat-libsUpgrade ncurses-c++-libsUpgrade ncurses-develUpgrade ncurses-debuginfoUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-staticUpgrade ncurses-debugsourceUpgrade ncurses-libs-debuginfo | Feb 17, 2025 | Apr 12, 2023 |
| Apple Osx Ncurses | — | Upgrade macOS to the latest version | Sep 8, 2023 | Sep 8, 2023 |
| Centos_linux | — | Upgrade ncurses-develUpgrade ncurses-c++-libsUpgrade ncurses-libs-debuginfoUpgrade ncurses-debugsourceUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-baseUpgrade ncurses-compat-libsUpgrade ncurses-termUpgrade ncurses-libsUpgrade ncurses-debuginfoUpgrade ncurses | Sep 20, 2023 | Apr 14, 2023 |
| Debian | — | Upgrade ncurses | Dec 11, 2023 | Apr 14, 2023 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses-compat.Upgrade sys-libs/ncurses. | Aug 12, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libs | Jul 18, 2023 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libs | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ncurses-libsUpgrade ncursesUpgrade ncurses-base | Aug 9, 2023 | Apr 14, 2023 |
| Oracle_linux | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncurses-develUpgrade ncurses-libs | Sep 21, 2023 | Apr 12, 2023 |
| Redhat_linux | — | Upgrade ncurses-baseUpgrade ncurses-debugsourceUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-debuginfoUpgrade ncursesNo solution existsUpgrade ncurses-develUpgrade ncurses-libs-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-libsUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-termUpgrade ncurses-compat-libs | Sep 20, 2023 | Apr 14, 2023 |
| Suse | — | Upgrade terminfo-baseUpgrade ncurses5-develUpgrade libncurses5Upgrade ncurses5-devel-32bitUpgrade libncurses6-32bitUpgrade terminfoUpgrade ncurses-devel-32bitUpgrade libncurses5-32bitUpgrade terminfo-screenUpgrade ncurses-utilsUpgrade terminfo-itermUpgrade tackUpgrade libncurses6Upgrade ncurses-devel | May 8, 2023 | Apr 14, 2023 |
| Ubuntu | — | Upgrade lib64tinfo5Upgrade libncursesw5 (Ubuntu Pro)Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade libncursesw6Upgrade libncursesw5Upgrade libx32ncurses5Upgrade libtinfo5 (Ubuntu Pro)Upgrade libtinfo5Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade lib64ncurses5Upgrade lib64ncurses6Upgrade libtinfo6Upgrade lib32ncursesw5Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade lib64tinfo6Upgrade ncurses-binUpgrade libx32ncursesw5Upgrade lib64tinfo5 (Ubuntu Pro)Upgrade libncurses6Upgrade lib64ncursesw6Upgrade libncurses5Upgrade libx32tinfo5Upgrade lib32tinfo5Upgrade lib32ncurses6Upgrade lib32tinfo6Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro)Upgrade lib32ncurses5Upgrade lib32ncursesw6 | May 24, 2023 | Apr 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub