An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Mar 26, 2024 | Sep 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade ncurses-staticUpgrade ncurses-termUpgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses-debuginfoUpgrade ncurses-c++-libs | Dec 7, 2022 | Sep 20, 2021 |
| Amazon_linux_2023 | — | Upgrade ncurses-debugsourceUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-debuginfoUpgrade ncurses-termUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncurses-libs-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-static | Feb 17, 2025 | Aug 4, 2020 |
| Apple Osx Accelerateframework | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Apfs | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Assets | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Ats | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Audio | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Betaaccessutility | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Bom | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Bootcamp | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Corebluetooth | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Coretypes | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Crashreporter | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Curl | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Directoryutility | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Driverkit | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Exchange | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Facetime | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Finder | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Findmy | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Grapher | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Heimdal | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Imageprocessing | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Intelgraphicsdriver | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Iohidfamily | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Iokit | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Mail | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Maps | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Medialibrary | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Ncurses | — | Upgrade macOS to the latest version | Oct 28, 2022 | Sep 20, 2021 |
| Debian | — | Upgrade ncurses | Dec 11, 2023 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libs | Feb 28, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncurses-libsUpgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncurses-c++-libsUpgrade ncurses-termUpgrade ncurses-baseUpgrade ncurses | Dec 28, 2021 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libs | Jan 4, 2022 | Sep 20, 2021 |
| Oracle Solaris | — | Upgrade library/ncurses to version 6.3-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Sep 20, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 20, 2021 |
| Suse | — | Upgrade libncurses5-32bitUpgrade ncurses-utilsUpgrade libncurses6Upgrade ncurses5-devel-32bitUpgrade ncurses-develUpgrade terminfo-screenUpgrade terminfoUpgrade libncurses6-32bitUpgrade terminfo-itermUpgrade libncurses5Upgrade ncurses5-develUpgrade tackUpgrade ncurses-devel-32bitUpgrade terminfo-base | Oct 21, 2021 | Sep 20, 2021 |
| Ubuntu | — | Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib32tinfo5Upgrade lib64ncurses6Upgrade libtinfo5Upgrade libx32ncursesw5Upgrade lib64ncurses5Upgrade lib32ncurses5Upgrade lib32tinfo6Upgrade libncurses5 (Ubuntu Pro)Upgrade libtinfo6Upgrade lib32ncursesw6Upgrade libx32tinfo5Upgrade lib32ncursesw5Upgrade lib64ncursesw6Upgrade ncurses-binUpgrade libncursesw5Upgrade libncurses6Upgrade lib64tinfo5Upgrade libtinfo5 (Ubuntu Pro)Upgrade libncursesw6Upgrade lib32ncurses6Upgrade libncurses5Upgrade lib64tinfo6Upgrade libx32ncurses5 | Mar 22, 2023 | Sep 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub