There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Oct 25, 2017 | Aug 29, 2017 |
| Debian | — | Upgrade ncurses | Jul 30, 2024 | Aug 29, 2017 |
| Freebsd | — | Upgrade ncurses | Oct 11, 2017 | Oct 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses. | Apr 18, 2018 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ncurses-baseUpgrade ncurses-termUpgrade ncurses-libsUpgrade ncurses-develUpgrade ncurses | Dec 4, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ncurses-libsUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-develUpgrade ncurses-term | Dec 18, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ncurses-libsUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-develUpgrade ncurses-term | Feb 24, 2020 | Aug 29, 2017 |
| Oracle Solaris | — | Upgrade library/ncurses to version 6.1.0.20190105-11.4.8.0.1.1.0 on Solaris 11.4 | Apr 17, 2019 | Aug 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 23, 2017 |
| Suse | — | Upgrade libncurses6-32bitUpgrade ncurses-devel-32bitUpgrade terminfo-baseUpgrade libncurses5-x86Upgrade tackUpgrade ncurses-utilsUpgrade terminfoUpgrade ncurses-develUpgrade libncurses6-x86Upgrade libncurses6Upgrade libncurses5Upgrade libncurses5-32bit | Dec 1, 2017 | Aug 29, 2017 |
| Ubuntu | — | Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade libncursesw5 (Ubuntu Pro)Upgrade libtinfo5 (Ubuntu Pro)Upgrade lib64tinfo5 (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro)Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade ncurses-term (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade ncurses-base (Ubuntu Pro) | May 27, 2022 | Aug 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub