There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Oct 25, 2017 | Aug 29, 2017 |
| Debian | — | Upgrade ncurses | Jul 30, 2024 | Aug 29, 2017 |
| Freebsd | — | Upgrade ncurses | Oct 11, 2017 | Oct 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses. | Apr 18, 2018 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ncurses-develUpgrade ncurses-termUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libs | Dec 4, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ncurses-develUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses-term | Dec 18, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-develUpgrade ncurses-baseUpgrade ncurses | Feb 24, 2020 | Aug 29, 2017 |
| Oracle Solaris | — | Upgrade library/ncurses to version 6.1.0.20190105-11.4.8.0.1.1.0 on Solaris 11.4 | Apr 17, 2019 | Aug 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 23, 2017 |
| Suse | — | Upgrade libncurses5-32bitUpgrade terminfoUpgrade libncurses6Upgrade terminfo-baseUpgrade libncurses5Upgrade ncurses-develUpgrade ncurses-utilsUpgrade tackUpgrade libncurses6-x86Upgrade ncurses-devel-32bitUpgrade libncurses6-32bitUpgrade libncurses5-x86 | Dec 1, 2017 | Aug 29, 2017 |
| Ubuntu | — | Upgrade ncurses-term (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib64tinfo5 (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade libtinfo5 (Ubuntu Pro)Upgrade libncursesw5 (Ubuntu Pro)Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade ncurses-base (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro)Upgrade lib32ncursesw5 (Ubuntu Pro) | May 27, 2022 | Aug 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 29, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub