ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncurses-develUpgrade ncurses | Sep 25, 2023 | Apr 14, 2023 |
| Alpine Linux | — | Upgrade ncurses | Mar 26, 2024 | Apr 14, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncurses-staticUpgrade ncurses-baseUpgrade ncurses-develUpgrade ncurses-libsUpgrade ncursesUpgrade ncurses-compat-libsUpgrade ncurses-debuginfo | Jul 4, 2023 | Apr 14, 2023 |
| Amazon_linux | — | Upgrade ncurses | Jul 20, 2023 | Apr 14, 2023 |
| Amazon_linux_2023 | — | Upgrade ncurses-c++-libsUpgrade ncurses-debugsourceUpgrade ncurses-compat-libsUpgrade ncurses-staticUpgrade ncurses-debuginfoUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-libs-debuginfoUpgrade ncurses-develUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses-term | Feb 17, 2025 | Apr 12, 2023 |
| Apple Osx Ncurses | — | Upgrade macOS to the latest version | Sep 8, 2023 | Sep 8, 2023 |
| Centos_linux | — | Upgrade ncursesUpgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-debuginfoUpgrade ncurses-libs-debuginfoUpgrade ncurses-debugsourceUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-baseUpgrade ncurses-develUpgrade ncurses-compat-libs | Sep 20, 2023 | Apr 14, 2023 |
| Debian | — | Upgrade ncurses | Dec 11, 2023 | Apr 14, 2023 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses-compat.Upgrade sys-libs/ncurses. | Aug 12, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses | Jul 18, 2023 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ncursesUpgrade ncurses-libsUpgrade ncurses-base | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncurses-libsUpgrade ncurses-develUpgrade ncurses-c++-libsUpgrade ncurses-termUpgrade ncurses-compat-libsUpgrade ncurses-baseUpgrade ncurses | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libs | Aug 9, 2023 | Apr 14, 2023 |
| Oracle_linux | — | Upgrade ncurses-c++-libsUpgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncurses-libsUpgrade ncurses-baseUpgrade ncurses-termUpgrade ncurses | Sep 21, 2023 | Apr 12, 2023 |
| Redhat_linux | — | Upgrade ncurses-baseUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-debuginfoUpgrade ncursesUpgrade ncurses-debugsourceUpgrade ncurses-termUpgrade ncurses-compat-libsUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-libsUpgrade ncurses-develNo solution existsUpgrade ncurses-libs-debuginfo | Sep 20, 2023 | Apr 14, 2023 |
| Suse | — | Upgrade libncurses6-32bitUpgrade libncurses5Upgrade terminfoUpgrade ncurses5-develUpgrade ncurses5-devel-32bitUpgrade terminfo-baseUpgrade ncurses-develUpgrade tackUpgrade ncurses-devel-32bitUpgrade ncurses-utilsUpgrade terminfo-itermUpgrade libncurses6Upgrade terminfo-screenUpgrade libncurses5-32bit | May 8, 2023 | Apr 14, 2023 |
| Ubuntu | — | Upgrade libncurses6Upgrade lib32ncursesw6Upgrade lib64ncursesw6Upgrade lib32ncurses6Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade lib64tinfo6Upgrade libncurses5 (Ubuntu Pro)Upgrade lib32ncurses5Upgrade ncurses-binUpgrade libx32tinfo5Upgrade lib32tinfo5Upgrade libncurses5Upgrade lib32tinfo6Upgrade lib64tinfo5 (Ubuntu Pro)Upgrade libx32ncursesw5Upgrade libncursesw5 (Ubuntu Pro)Upgrade lib64tinfo5Upgrade lib64ncurses6Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade lib64ncurses5Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade libncursesw5Upgrade libtinfo5Upgrade libtinfo6Upgrade libx32ncurses5Upgrade libncursesw6Upgrade libtinfo5 (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade lib32ncursesw5Upgrade lib64ncurses5 (Ubuntu Pro) | May 24, 2023 | Apr 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub