vulnerability

Red Hat: CVE-2019-17594: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c (Multiple Advisories)

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
Oct 14, 2019
Added
Nov 10, 2021
Modified
Aug 11, 2025

Description

There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-ncursesredhat-upgrade-ncurses-baseredhat-upgrade-ncurses-c-libsredhat-upgrade-ncurses-c-libs-debuginforedhat-upgrade-ncurses-compat-libsredhat-upgrade-ncurses-compat-libs-debuginforedhat-upgrade-ncurses-debuginforedhat-upgrade-ncurses-debugsourceredhat-upgrade-ncurses-develredhat-upgrade-ncurses-libsredhat-upgrade-ncurses-libs-debuginforedhat-upgrade-ncurses-term
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.