There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ncurses-libsUpgrade ncurses-compat-libsUpgrade ncurses-develUpgrade ncurses-c++-libsUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-term | May 4, 2022 | Oct 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-termUpgrade ncurses-debuginfoUpgrade ncurses-develUpgrade ncurses-libsUpgrade ncurses-staticUpgrade ncurses-c++-libsUpgrade ncurses-compat-libs | Jan 10, 2024 | Oct 14, 2019 |
| Centos_linux | — | Upgrade ncurses-debuginfoUpgrade ncurses-libsUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-debugsourceUpgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-compat-libsUpgrade ncurses-libs-debuginfoUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-devel | Nov 10, 2021 | Oct 14, 2019 |
| Debian | — | Upgrade ncurses | Jul 30, 2024 | Oct 14, 2019 |
| Gentoo Linux | — | Upgrade sys-apps/ncurses. | Jan 26, 2021 | Oct 14, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-devel | Dec 4, 2019 | Oct 14, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-devel | Dec 18, 2019 | Oct 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ncurses-libsUpgrade ncurses-develUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-term | Dec 11, 2019 | Oct 14, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncurses-libsUpgrade ncurses-c++-libsUpgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncurses-termUpgrade ncursesUpgrade ncurses-base | Nov 28, 2019 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade library/ncurses to version 6.1.0.20190105-11.4.16.0.1.3.0 on Solaris 11.4 | Dec 18, 2019 | Oct 14, 2019 |
| Oracle_linux | — | Upgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncurses-termUpgrade ncurses-baseUpgrade ncurses-develUpgrade ncurses-libsUpgrade ncurses | Nov 17, 2021 | Oct 11, 2019 |
| Redhat_linux | — | Upgrade ncurses-debugsourceNo solution existsUpgrade ncurses-libsUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-compat-libsUpgrade ncurses-termUpgrade ncurses-debuginfoUpgrade ncursesUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-baseUpgrade ncurses-develUpgrade ncurses-c++-libsUpgrade ncurses-libs-debuginfo | Nov 10, 2021 | Oct 14, 2019 |
| Rocky_linux | — | Upgrade ncurses-compat-libsUpgrade ncurses-libsUpgrade ncurses-libs-debuginfoUpgrade ncurses-develUpgrade ncurses-debugsourceUpgrade ncurses-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses | Mar 12, 2024 | Oct 14, 2019 |
| Suse | — | Upgrade tackUpgrade libncurses6-32bitUpgrade ncurses-utilsUpgrade ncurses-develUpgrade terminfoUpgrade ncurses-devel-32bitUpgrade libncurses5-32bitUpgrade libncurses6Upgrade libncurses5Upgrade terminfo-baseUpgrade terminfo-screenUpgrade ncurses5-develUpgrade terminfo-itermUpgrade ncurses5-devel-32bit | Nov 26, 2019 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libncursesw5Upgrade libtinfo5 (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro)Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib64ncurses5Upgrade libx32ncurses5Upgrade lib32tinfo5Upgrade lib32ncursesw5Upgrade lib32ncurses5Upgrade ncurses-binUpgrade libncurses5Upgrade libx32tinfo5Upgrade libx32ncursesw5Upgrade libtinfo5Upgrade lib64tinfo5 | Mar 22, 2023 | Oct 14, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub