Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ncursesamazon-linux-ami-2-upgrade-ncurses-baseamazon-linux-ami-2-upgrade-ncurses-c-libsamazon-linux-ami-2-upgrade-ncurses-compat-libsamazon-linux-ami-2-upgrade-ncurses-debuginfoamazon-linux-ami-2-upgrade-ncurses-develamazon-linux-ami-2-upgrade-ncurses-libsamazon-linux-ami-2-upgrade-ncurses-staticamazon-linux-ami-2-upgrade-ncurses-term | Jan 10, 2024 | Aug 22, 2023 | |
| Apple Osx Ncurses | apple-osx-upgrade-latest | Dec 12, 2023 | Aug 22, 2023 | |
| Debian | debian-upgrade-ncurses | Oct 2, 2023 | Aug 22, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-ncurseshuawei-euleros-2_0_sp8-upgrade-ncurses-basehuawei-euleros-2_0_sp8-upgrade-ncurses-c++-libshuawei-euleros-2_0_sp8-upgrade-ncurses-compat-libshuawei-euleros-2_0_sp8-upgrade-ncurses-develhuawei-euleros-2_0_sp8-upgrade-ncurses-libshuawei-euleros-2_0_sp8-upgrade-ncurses-term | Mar 13, 2024 | Aug 22, 2023 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Aug 22, 2023 | |
| Ubuntu | ubuntu-pro-upgrade-lib32ncurses5ubuntu-pro-upgrade-lib32ncursesw5ubuntu-pro-upgrade-lib32tinfo5ubuntu-pro-upgrade-lib64ncurses5ubuntu-pro-upgrade-lib64tinfo5ubuntu-pro-upgrade-libncurses5ubuntu-pro-upgrade-libncursesw5ubuntu-pro-upgrade-libtinfo5ubuntu-pro-upgrade-libx32ncurses5ubuntu-pro-upgrade-libx32ncursesw5ubuntu-pro-upgrade-libx32tinfo5ubuntu-pro-upgrade-ncurses-bin | Oct 25, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub