In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Sep 20, 2017 | Jun 29, 2017 |
| Amazon Linux Ami 2 | — | Upgrade ncurses-compat-libsUpgrade ncurses-c++-libsUpgrade ncurses-termUpgrade ncurses-debuginfoUpgrade ncurses-staticUpgrade ncurses-develUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libs | Apr 27, 2020 | Jun 29, 2017 |
| Debian | — | Upgrade ncurses | Jul 30, 2024 | Jun 29, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses. | Apr 18, 2018 | Jun 29, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ncurses-libsUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-develUpgrade ncurses-term | Dec 4, 2019 | Jun 29, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-develUpgrade ncursesUpgrade ncurses-base | Jun 28, 2018 | Jun 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 24, 2017 |
| Suse | — | Upgrade sles12sp2-docker-imageUpgrade sles12-docker-imageUpgrade terminfo-baseUpgrade ncurses-utilsUpgrade libncurses5-32bitUpgrade libncurses5-x86Upgrade libncurses6-x86Upgrade libncurses6-32bitUpgrade terminfoUpgrade libncurses6Upgrade ncurses-develUpgrade ncurses-devel-32bitUpgrade sles12sp1-docker-imageUpgrade libncurses5Upgrade tack | Jul 6, 2017 | Jun 29, 2017 |
| Ubuntu | — | Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade ncurses-base (Ubuntu Pro)Upgrade libncursesw5 (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade ncurses-term (Ubuntu Pro)Upgrade lib64tinfo5 (Ubuntu Pro)Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade libtinfo5 (Ubuntu Pro)Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro) | May 27, 2022 | Jun 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub