Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ncurses-c++-libsUpgrade ncurses-debuginfoUpgrade ncurses-staticUpgrade ncurses-compat-libsUpgrade ncurses-develUpgrade ncurses-termUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses | Jan 10, 2024 | Aug 22, 2023 |
| Apple Osx Accessibility | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Accounts | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Appleevents | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Applegraphicscontrol | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Appleva | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Archiveutility | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Assets | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Automation | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Bluetooth | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Coremediaplayback | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Curl | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Diskarbitration | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Emoji | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Fileurl | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Findmy | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Iokit | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Iousbdevicefamily | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Libsystem | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Aug 22, 2023 |
| Apple Osx Ncurses | — | Upgrade macOS to the latest version | Dec 12, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade ncurses | Oct 2, 2023 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncurses-termUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncurses-c++-libs | Mar 13, 2024 | Aug 22, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 22, 2023 |
| Ubuntu | — | Upgrade libncursesw5 (Ubuntu Pro)Upgrade libtinfo5 (Ubuntu Pro)Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro)Upgrade lib64tinfo5 (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro) | Oct 25, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub