An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Mar 26, 2024 | Sep 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade ncursesUpgrade ncurses-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses-develUpgrade ncurses-staticUpgrade ncurses-compat-libsUpgrade ncurses-term | Dec 7, 2022 | Sep 20, 2021 |
| Amazon_linux_2023 | — | Upgrade ncurses-c++-libsUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-termUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-compat-libsUpgrade ncurses-develUpgrade ncurses-libs-debuginfoUpgrade ncurses-staticUpgrade ncurses-debugsourceUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-debuginfo | Feb 17, 2025 | Aug 4, 2020 |
| Apple Osx Accelerateframework | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Apfs | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Appleavd | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Assets | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Ats | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Audio | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Avevideoencoder | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Betaaccessutility | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Bom | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Bootcamp | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Corebluetooth | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Coretypes | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Crashreporter | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Curl | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Directoryutility | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Driverkit | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Exchange | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Facetime | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Finder | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Findmy | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Grapher | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Heimdal | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Imageprocessing | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Intelgraphicsdriver | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Iohidfamily | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Iokit | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Mail | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Maps | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Medialibrary | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Sep 20, 2021 |
| Apple Osx Ncurses | — | Upgrade macOS to the latest version | Oct 28, 2022 | Sep 20, 2021 |
| Debian | — | Upgrade ncurses | Dec 11, 2023 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ncurses-libsUpgrade ncursesUpgrade ncurses-base | Feb 28, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-c++-libsUpgrade ncurses-termUpgrade ncurses-develUpgrade ncurses-compat-libs | Dec 28, 2021 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ncursesUpgrade ncurses-libsUpgrade ncurses-base | Jan 4, 2022 | Sep 20, 2021 |
| Oracle Solaris | — | Upgrade library/ncurses to version 6.3-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Sep 20, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 20, 2021 |
| Suse | — | Upgrade terminfo-baseUpgrade tackUpgrade ncurses-devel-32bitUpgrade ncurses-develUpgrade libncurses5-32bitUpgrade libncurses5Upgrade terminfo-screenUpgrade libncurses6Upgrade ncurses5-devel-32bitUpgrade libncurses6-32bitUpgrade ncurses-utilsUpgrade terminfo-itermUpgrade terminfoUpgrade ncurses5-devel | Oct 21, 2021 | Sep 20, 2021 |
| Ubuntu | — | Upgrade lib64ncursesw6Upgrade lib32ncurses6Upgrade libncurses6Upgrade libncurses5Upgrade lib64tinfo6Upgrade libx32ncurses5Upgrade lib64tinfo5Upgrade libncursesw5Upgrade libtinfo5 (Ubuntu Pro)Upgrade ncurses-binUpgrade libncursesw6Upgrade lib64ncurses5Upgrade lib32tinfo5Upgrade lib32ncurses5Upgrade lib32tinfo6Upgrade libx32ncursesw5Upgrade lib32ncursesw5Upgrade libtinfo6Upgrade libx32tinfo5Upgrade libncurses5 (Ubuntu Pro)Upgrade libtinfo5Upgrade lib64ncurses6Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib32ncursesw6 | Mar 22, 2023 | Sep 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub