Lucene search

K
broadcomBroadcom Security ResponseBSNSA22702
HistoryNov 07, 2023 - 12:00 a.m.

A vulnerability was found in ncurses and occurs when used by a setuid application. (CVE-2023-29491)

2023-11-0700:00:00
Broadcom Security Response
support.broadcom.com
24
ncurses
vulnerability
setuid
memory corruption
terminfo database

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.