The vulnerability of the _nc_captoinfo function in the captoinfo.c component of the input/output library for the Ncurses terminal allows a hacker to access confidential data, compromise its integrity, and cause service failures.

🗓️ 11 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Buffer overflow in _nc_captoinfo of captoinfo.c in the Ncurses I/O library enables data leakage.

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods API Management	25 Apr 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: A buffer overread, security restrictions bypass, a use-after-free, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	25 Mar 202523:50	–	ibm
Tenable Nessus	Amazon Linux 2022 : ncurses (ALAS2022-2022-217)	9 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : ncurses, ncurses-base, ncurses-c++-libs (ALAS2023-2023-023)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ncurses (ALAS-2022-1893)	7 Dec 202200:00	–	nessus
Tenable Nessus	Debian dla-3682 : lib32ncurses-dev - security update	3 Dec 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : ncurses (EulerOS-SA-2021-2806)	25 Dec 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : ncurses (EulerOS-SA-2021-2917)	30 Dec 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : ncurses (EulerOS-SA-2021-2925)	30 Dec 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : ncurses (EulerOS-SA-2022-1047)	11 Feb 202200:00	–	nessus

Source	Link
cvsweb	www.cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/devel/ncurses/patches/patch-ncurses_tinfo_captoinfo.c
lists	www.lists.gnu.org/archive/html/bug-ncurses/2020-08/msg00006.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-39537
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-39537
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.10/
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2779

01 Jun 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 38.8

CVSS 210

EPSS0.03005

buffer overflow captoinfo function captoinfo.c component Ncurses library data leakage