An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Mar 26, 2024 | Sep 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses-debuginfoUpgrade ncurses-c++-libsUpgrade ncursesUpgrade ncurses-compat-libsUpgrade ncurses-develUpgrade ncurses-termUpgrade ncurses-static | Dec 7, 2022 | Sep 20, 2021 |
| Amazon_linux_2023 | — | Upgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses-debuginfoUpgrade ncurses-debugsourceUpgrade ncursesUpgrade ncurses-libs-debuginfoUpgrade ncurses-staticUpgrade ncurses-develUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-termUpgrade ncurses-compat-libs | Feb 17, 2025 | Aug 4, 2020 |
| Apple Osx Accelerateframework | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Apfs | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Assets | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Ats | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Audio | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Betaaccessutility | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Bom | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Bootcamp | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Corebluetooth | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Coretypes | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Crashreporter | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Curl | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Directoryutility | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Driverkit | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Exchange | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Facetime | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Finder | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Findmy | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Grapher | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Heimdal | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Imageprocessing | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Intelgraphicsdriver | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Iohidfamily | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Iokit | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Mail | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Maps | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Medialibrary | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Ncurses | — | Upgrade macOS to the latest version | Oct 28, 2022 | Sep 20, 2021 |
| Debian | — | Upgrade ncurses | Dec 11, 2023 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses | Feb 28, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses-develUpgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncurses-compat-libs | Dec 28, 2021 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ncurses-libsUpgrade ncursesUpgrade ncurses-base | Jan 4, 2022 | Sep 20, 2021 |
| Oracle Solaris | — | Upgrade library/ncurses to version 6.3-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Sep 20, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 20, 2021 |
| Suse | — | Upgrade terminfo-baseUpgrade tackUpgrade ncurses-devel-32bitUpgrade terminfoUpgrade ncurses5-devel-32bitUpgrade terminfo-itermUpgrade terminfo-screenUpgrade libncurses5Upgrade libncurses6Upgrade ncurses-develUpgrade libncurses5-32bitUpgrade libncurses6-32bitUpgrade ncurses-utilsUpgrade ncurses5-devel | Oct 21, 2021 | Sep 20, 2021 |
| Ubuntu | — | Upgrade lib64ncurses5Upgrade libtinfo5Upgrade lib32ncursesw5Upgrade lib32tinfo5Upgrade libx32ncursesw5Upgrade libncurses5 (Ubuntu Pro)Upgrade lib32tinfo6Upgrade libx32tinfo5Upgrade lib64ncurses6Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib32ncurses5Upgrade lib32ncursesw6Upgrade libtinfo6Upgrade libncursesw6Upgrade lib64tinfo5Upgrade libncurses5Upgrade lib64ncursesw6Upgrade lib64tinfo6Upgrade ncurses-binUpgrade libtinfo5 (Ubuntu Pro)Upgrade lib32ncurses6Upgrade libncursesw5Upgrade libx32ncurses5Upgrade libncurses6 | Mar 22, 2023 | Sep 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub