In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ncurses | Oct 25, 2017 | Jul 8, 2017 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ncursesamazon-linux-ami-2-upgrade-ncurses-baseamazon-linux-ami-2-upgrade-ncurses-c-libsamazon-linux-ami-2-upgrade-ncurses-compat-libsamazon-linux-ami-2-upgrade-ncurses-debuginfoamazon-linux-ami-2-upgrade-ncurses-develamazon-linux-ami-2-upgrade-ncurses-libsamazon-linux-ami-2-upgrade-ncurses-staticamazon-linux-ami-2-upgrade-ncurses-term | Apr 27, 2020 | Jul 8, 2017 | |
| Debian | debian-upgrade-ncurses | Jul 30, 2024 | Jul 8, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-libs-ncurses | Apr 18, 2018 | Jul 8, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-ncurseshuawei-euleros-2_0_sp2-upgrade-ncurses-basehuawei-euleros-2_0_sp2-upgrade-ncurses-develhuawei-euleros-2_0_sp2-upgrade-ncurses-libshuawei-euleros-2_0_sp2-upgrade-ncurses-term | Dec 4, 2019 | Jul 8, 2017 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | Jul 8, 2017 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jun 24, 2017 | |
| Suse | — | suse-upgrade-libncurses5suse-upgrade-libncurses5-32bitsuse-upgrade-libncurses5-x86suse-upgrade-libncurses6suse-upgrade-libncurses6-32bitsuse-upgrade-libncurses6-x86suse-upgrade-ncurses-develsuse-upgrade-ncurses-devel-32bitsuse-upgrade-ncurses-utilssuse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-imagesuse-upgrade-sles12sp2-docker-imagesuse-upgrade-tacksuse-upgrade-terminfosuse-upgrade-terminfo-base | Aug 7, 2017 | Jul 8, 2017 |
| Ubuntu | ubuntu-pro-upgrade-lib32ncurses5ubuntu-pro-upgrade-lib32ncursesw5ubuntu-pro-upgrade-lib32tinfo5ubuntu-pro-upgrade-lib64ncurses5ubuntu-pro-upgrade-lib64tinfo5ubuntu-pro-upgrade-libncurses5ubuntu-pro-upgrade-libncursesw5ubuntu-pro-upgrade-libtinfo5ubuntu-pro-upgrade-libx32ncurses5ubuntu-pro-upgrade-libx32ncursesw5ubuntu-pro-upgrade-libx32tinfo5ubuntu-pro-upgrade-ncurses-baseubuntu-pro-upgrade-ncurses-binubuntu-pro-upgrade-ncurses-term | May 27, 2022 | Jul 8, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub