There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Oct 25, 2017 | Aug 29, 2017 |
| Debian | — | Upgrade ncurses | Jul 30, 2024 | Aug 29, 2017 |
| Freebsd | — | Upgrade ncurses | Oct 11, 2017 | Oct 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses. | Apr 18, 2018 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses-develUpgrade ncurses-term | Dec 4, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ncurses-libsUpgrade ncurses-termUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-devel | Dec 18, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-develUpgrade ncursesUpgrade ncurses-base | Feb 24, 2020 | Aug 29, 2017 |
| Oracle Solaris | — | Upgrade library/ncurses to version 6.1.0.20190105-11.4.8.0.1.1.0 on Solaris 11.4 | Apr 17, 2019 | Aug 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 23, 2017 |
| Suse | — | Upgrade terminfoUpgrade libncurses5-32bitUpgrade libncurses5Upgrade terminfo-baseUpgrade ncurses-develUpgrade libncurses6Upgrade libncurses6-32bitUpgrade libncurses5-x86Upgrade ncurses-utilsUpgrade libncurses6-x86Upgrade ncurses-devel-32bitUpgrade tack | Dec 1, 2017 | Aug 29, 2017 |
| Ubuntu | — | Upgrade libncursesw5 (Ubuntu Pro)Upgrade ncurses-bin (Ubuntu Pro)Upgrade libtinfo5 (Ubuntu Pro)Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade lib64tinfo5 (Ubuntu Pro)Upgrade ncurses-term (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade ncurses-base (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro) | May 27, 2022 | Aug 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub