ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ncurses-baseUpgrade ncurses-termUpgrade ncurses-libsUpgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncursesUpgrade ncurses-c++-libs | Sep 25, 2023 | Apr 14, 2023 |
| Alpine Linux | — | Upgrade ncurses | Mar 26, 2024 | Apr 14, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ncurses-termUpgrade ncurses-staticUpgrade ncurses-develUpgrade ncurses-baseUpgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncurses-debuginfoUpgrade ncurses-libsUpgrade ncurses | Jul 4, 2023 | Apr 14, 2023 |
| Amazon_linux | — | Upgrade ncurses | Jul 20, 2023 | Apr 14, 2023 |
| Amazon_linux_2023 | — | Upgrade ncurses-staticUpgrade ncurses-libs-debuginfoUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-develUpgrade ncurses-debugsourceUpgrade ncurses-c++-libsUpgrade ncurses-compat-libsUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-debuginfoUpgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses-termUpgrade ncurses | Feb 17, 2025 | Apr 12, 2023 |
| Apple Osx Ncurses | — | Upgrade macOS to the latest version | Sep 8, 2023 | Sep 8, 2023 |
| Centos_linux | — | Upgrade ncurses-termUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-debuginfoUpgrade ncurses-develUpgrade ncurses-baseUpgrade ncurses-debugsourceUpgrade ncurses-libs-debuginfoUpgrade ncurses-compat-libsUpgrade ncurses-c++-libsUpgrade ncurses-compat-libs-debuginfoUpgrade ncurses-c++-libs-debuginfo | Sep 20, 2023 | Apr 14, 2023 |
| Debian | — | Upgrade ncurses | Dec 11, 2023 | Apr 14, 2023 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses.Upgrade sys-libs/ncurses-compat. | Aug 12, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ncursesUpgrade ncurses-baseUpgrade ncurses-libs | Jul 18, 2023 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ncurses-compat-libsUpgrade ncurses-c++-libsUpgrade ncurses-termUpgrade ncurses-develUpgrade ncurses-baseUpgrade ncurses-libsUpgrade ncurses | Jan 10, 2024 | Apr 14, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ncurses-libsUpgrade ncursesUpgrade ncurses-base | Aug 9, 2023 | Apr 14, 2023 |
| Oracle_linux | — | Upgrade ncurses-baseUpgrade ncurses-termUpgrade ncursesUpgrade ncurses-develUpgrade ncurses-compat-libsUpgrade ncurses-c++-libsUpgrade ncurses-libs | Sep 21, 2023 | Apr 12, 2023 |
| Redhat_linux | — | Upgrade ncurses-compat-libs-debuginfoUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-debuginfoUpgrade ncurses-debugsourceUpgrade ncurses-c++-libsUpgrade ncurses-c++-libs-debuginfoUpgrade ncurses-termNo solution existsUpgrade ncurses-compat-libsUpgrade ncurses-libs-debuginfoUpgrade ncurses-libsUpgrade ncurses-devel | Sep 20, 2023 | Apr 14, 2023 |
| Suse | — | Upgrade ncurses-develUpgrade libncurses6Upgrade tackUpgrade ncurses-utilsUpgrade ncurses-devel-32bitUpgrade terminfo-itermUpgrade libncurses5-32bitUpgrade terminfo-screenUpgrade terminfo-baseUpgrade terminfoUpgrade libncurses5Upgrade ncurses5-develUpgrade ncurses5-devel-32bitUpgrade libncurses6-32bit | May 8, 2023 | Apr 14, 2023 |
| Ubuntu | — | Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade libncursesw5 (Ubuntu Pro)Upgrade lib64tinfo5Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade libncursesw5Upgrade libx32ncurses5Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade libtinfo5Upgrade ncurses-bin (Ubuntu Pro)Upgrade lib64ncurses5Upgrade libtinfo6Upgrade lib64ncurses6Upgrade libtinfo5 (Ubuntu Pro)Upgrade libncursesw6Upgrade lib32ncursesw5Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade lib32ncurses6Upgrade libncurses6Upgrade libncurses5 (Ubuntu Pro)Upgrade ncurses-binUpgrade lib64tinfo5 (Ubuntu Pro)Upgrade lib64ncursesw6Upgrade libx32ncursesw5Upgrade lib32ncursesw6Upgrade lib32ncurses5Upgrade lib64tinfo6Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade libx32tinfo5Upgrade lib32tinfo5Upgrade libncurses5Upgrade lib32tinfo6 | May 24, 2023 | Apr 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub