ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncursesUpgrade ncurses-devel | Sep 25, 2023 | Apr 14, 2023 |
| Alpine Linux | — | Upgrade ncurses | Mar 26, 2024 | Apr 14, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ncursesUpgrade ncurses-compat-libsUpgrade ncurses-libsUpgrade ncurses-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-develUpgrade ncurses-staticUpgrade ncurses-baseUpgrade ncurses-term | Jul 4, 2023 | Apr 14, 2023 |
| Amazon_linux | — | Upgrade ncurses | Jul 20, 2023 | Apr 14, 2023 |
| Amazon_linux_2023 | — | Upgrade ncurses-develUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-libs-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncurses-debugsourceUpgrade ncurses-debuginfoUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-staticUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-base | Feb 17, 2025 | Apr 12, 2023 |
| Apple Osx Ncurses | — | Upgrade macOS to the latest version | Sep 7, 2023 | Apr 14, 2023 |
| Centos_linux | — | Upgrade ncursesUpgrade ncurses-libsUpgrade ncurses-debuginfoUpgrade ncurses-termUpgrade ncurses-libs-debuginfoUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-develUpgrade ncurses-debugsourceUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-compat-libsUpgrade ncurses-c++-libsUpgrade ncurses-base | Sep 20, 2023 | Apr 14, 2023 |
| Debian | — | Upgrade ncurses | Dec 11, 2023 | Apr 14, 2023 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses-compat.Upgrade sys-libs/ncurses. | Aug 12, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libs | Jul 18, 2023 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncurses-c++-libsUpgrade ncurses-develUpgrade ncurses-termUpgrade ncurses-compat-libsUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libs | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ncurses-libsUpgrade ncursesUpgrade ncurses-base | Aug 9, 2023 | Apr 14, 2023 |
| Oracle_linux | — | Upgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncurses-develUpgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-baseUpgrade ncurses | Sep 21, 2023 | Apr 12, 2023 |
| Redhat_linux | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-debugsourceUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-debuginfoUpgrade ncurses-develUpgrade ncurses-c++-libs-debuginfoNo solution existsUpgrade ncurses-libs-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-termUpgrade ncurses-compat-libsUpgrade ncurses-libs | Sep 20, 2023 | Apr 14, 2023 |
| Suse | — | Upgrade ncurses-develUpgrade tackUpgrade ncurses-utilsUpgrade terminfo-screenUpgrade libncurses5-32bitUpgrade libncurses6Upgrade ncurses-devel-32bitUpgrade terminfo-itermUpgrade terminfo-baseUpgrade terminfoUpgrade libncurses6-32bitUpgrade ncurses5-devel-32bitUpgrade libncurses5Upgrade ncurses5-devel | May 8, 2023 | Apr 14, 2023 |
| Ubuntu | — | Upgrade ncurses-bin (Ubuntu Pro)Upgrade libncursesw5Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade libtinfo5 (Ubuntu Pro)Upgrade libtinfo6Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade libtinfo5Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade libncursesw6Upgrade lib32ncursesw5Upgrade libx32ncurses5Upgrade libncursesw5 (Ubuntu Pro)Upgrade lib64tinfo5Upgrade lib64ncurses6Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade lib64ncurses5Upgrade lib64ncursesw6Upgrade libncurses6Upgrade lib32tinfo5Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade lib32tinfo6Upgrade libncurses5Upgrade libx32tinfo5Upgrade ncurses-binUpgrade lib64tinfo5 (Ubuntu Pro)Upgrade lib32ncurses6Upgrade libncurses5 (Ubuntu Pro)Upgrade lib64tinfo6Upgrade libx32ncursesw5Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade lib32ncursesw6Upgrade lib32ncurses5 | May 24, 2023 | Apr 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub