There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Oct 25, 2017 | Aug 29, 2017 |
| Debian | — | Upgrade ncurses | Jul 30, 2024 | Aug 29, 2017 |
| Freebsd | — | Upgrade ncurses | Oct 11, 2017 | Oct 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses. | Apr 18, 2018 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ncurses-termUpgrade ncurses-develUpgrade ncurses-libsUpgrade ncursesUpgrade ncurses-base | Dec 4, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ncurses-libsUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-develUpgrade ncurses-term | Dec 18, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ncurses-develUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-termUpgrade ncurses-libs | Feb 24, 2020 | Aug 29, 2017 |
| Oracle Solaris | — | Upgrade library/ncurses to version 6.1.0.20190105-11.4.8.0.1.1.0 on Solaris 11.4 | Apr 17, 2019 | Aug 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 23, 2017 |
| Suse | — | Upgrade libncurses6-32bitUpgrade libncurses5-x86Upgrade libncurses6-x86Upgrade tackUpgrade ncurses-devel-32bitUpgrade ncurses-utilsUpgrade libncurses6Upgrade terminfoUpgrade libncurses5Upgrade terminfo-baseUpgrade ncurses-develUpgrade libncurses5-32bit | Dec 1, 2017 | Aug 29, 2017 |
| Ubuntu | — | Upgrade libtinfo5 (Ubuntu Pro)Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade ncurses-term (Ubuntu Pro)Upgrade lib64tinfo5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade libncursesw5 (Ubuntu Pro)Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro)Upgrade ncurses-base (Ubuntu Pro) | May 27, 2022 | Aug 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub