There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Oct 25, 2017 | Aug 29, 2017 |
| Debian | — | Upgrade ncurses | Jul 30, 2024 | Aug 29, 2017 |
| Freebsd | — | Upgrade ncurses | Oct 11, 2017 | Oct 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses. | Apr 18, 2018 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ncurses-termUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-devel | Dec 4, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ncurses-termUpgrade ncurses-develUpgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses | Dec 18, 2019 | Aug 29, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ncurses-develUpgrade ncurses-termUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses | Feb 24, 2020 | Aug 29, 2017 |
| Oracle Solaris | — | Upgrade library/ncurses to version 6.1.0.20190105-11.4.8.0.1.1.0 on Solaris 11.4 | Apr 17, 2019 | Aug 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 23, 2017 |
| Suse | — | Upgrade terminfo-baseUpgrade libncurses5-x86Upgrade ncurses-devel-32bitUpgrade libncurses6-32bitUpgrade tackUpgrade libncurses6-x86Upgrade ncurses-utilsUpgrade terminfoUpgrade libncurses5Upgrade libncurses5-32bitUpgrade ncurses-develUpgrade libncurses6 | Dec 1, 2017 | Aug 29, 2017 |
| Ubuntu | — | Upgrade libncursesw5 (Ubuntu Pro)Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade libtinfo5 (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro)Upgrade lib64tinfo5 (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade ncurses-base (Ubuntu Pro)Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade ncurses-term (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro) | May 27, 2022 | Aug 29, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub