ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ncurses-baseUpgrade ncurses-termUpgrade ncurses-libsUpgrade ncurses-compat-libsUpgrade ncursesUpgrade ncurses-c++-libsUpgrade ncurses-devel | Sep 25, 2023 | Apr 14, 2023 |
| Alpine Linux | — | Upgrade ncurses | Mar 26, 2024 | Apr 14, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ncurses-debuginfoUpgrade ncurses-compat-libsUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-develUpgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncurses-staticUpgrade ncurses-base | Jul 4, 2023 | Apr 14, 2023 |
| Amazon_linux | — | Upgrade ncurses | Jul 20, 2023 | Apr 14, 2023 |
| Amazon_linux_2023 | — | Upgrade ncurses-libs-debuginfoUpgrade ncurses-staticUpgrade ncurses-debuginfoUpgrade ncurses-debugsourceUpgrade ncurses-develUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-libsUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-term | Feb 17, 2025 | Apr 12, 2023 |
| Apple Osx Ncurses | — | Upgrade macOS to the latest version | Sep 8, 2023 | Sep 8, 2023 |
| Centos_linux | — | Upgrade ncurses-baseUpgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncurses-debugsourceUpgrade ncurses-libs-debuginfoUpgrade ncurses-develUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-compat-libs-debuginfoUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses-debuginfo | Sep 20, 2023 | Apr 14, 2023 |
| Debian | — | Upgrade ncurses | Dec 11, 2023 | Apr 14, 2023 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses.Upgrade sys-libs/ncurses-compat. | Aug 12, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libs | Jul 18, 2023 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ncursesUpgrade ncurses-libsUpgrade ncurses-base | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncurses-termUpgrade ncurses-c++-libsUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-base | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ncurses-libsUpgrade ncursesUpgrade ncurses-base | Aug 9, 2023 | Apr 14, 2023 |
| Oracle_linux | — | Upgrade ncurses-c++-libsUpgrade ncurses-libsUpgrade ncurses-compat-libsUpgrade ncurses-develUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-term | Sep 21, 2023 | Apr 12, 2023 |
| Redhat_linux | — | Upgrade ncursesUpgrade ncurses-debugsourceUpgrade ncurses-baseUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-debuginfoNo solution existsUpgrade ncurses-develUpgrade ncurses-libs-debuginfoUpgrade ncurses-c++-libsUpgrade ncurses-libsUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-termUpgrade ncurses-compat-libs | Sep 20, 2023 | Apr 14, 2023 |
| Suse | — | Upgrade ncurses-devel-32bitUpgrade libncurses6Upgrade ncurses-utilsUpgrade tackUpgrade ncurses-develUpgrade terminfo-screenUpgrade libncurses5-32bitUpgrade terminfo-itermUpgrade libncurses6-32bitUpgrade ncurses5-devel-32bitUpgrade terminfoUpgrade terminfo-baseUpgrade libncurses5Upgrade ncurses5-devel | May 8, 2023 | Apr 14, 2023 |
| Ubuntu | — | Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade lib64ncurses5Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade libtinfo6Upgrade lib64ncurses6Upgrade lib64tinfo5Upgrade ncurses-bin (Ubuntu Pro)Upgrade libncursesw6Upgrade libncursesw5Upgrade libncursesw5 (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade lib32ncursesw5Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade libtinfo5Upgrade libx32ncurses5Upgrade libtinfo5 (Ubuntu Pro)Upgrade lib64ncursesw6Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade libncurses6Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade lib32ncursesw6Upgrade lib32ncurses5Upgrade lib32tinfo5Upgrade libncurses5Upgrade libx32tinfo5Upgrade lib32tinfo6Upgrade libncurses5 (Ubuntu Pro)Upgrade libx32ncursesw5Upgrade lib32ncurses6Upgrade lib64tinfo6Upgrade ncurses-binUpgrade lib64tinfo5 (Ubuntu Pro) | May 24, 2023 | Apr 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub