PT-2023-11515 · Ncurses +1 · Ncurses +1

🗓️ 22 Aug 2023 00:00:00Reported by Positive TechnologiesType

A buffer overflow in ncurses 6.1 fmt entry function at dump entry.c:1116 enables remote denial of service; update to a fixed version.

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods API Management	25 Apr 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: A buffer overread, security restrictions bypass, a use-after-free, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	25 Mar 202523:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	2 Sep 202514:07	–	ibm
Tenable Nessus	Amazon Linux 2 : ncurses (ALAS-2024-2412)	9 Jan 202400:00	–	nessus
Tenable Nessus	macOS 14.x < 14.2 Multiple Vulnerabilities (HT214036)	11 Dec 202300:00	–	nessus
Tenable Nessus	macOS 12.x < 12.7.2 Multiple Vulnerabilities (HT214037)	11 Dec 202300:00	–	nessus
Tenable Nessus	macOS 13.x < 13.6.3 Multiple Vulnerabilities (HT214038)	11 Dec 202300:00	–	nessus
Tenable Nessus	RHEL 6 : ncurses (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : ncurses (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 8 : ncurses (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus

Source	Link
github	www.github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc4.md
ubuntu	www.ubuntu.com/security/CVE-2020-19188
osv	www.osv.dev/vulnerability/CVE-2020-19188
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-19188
cve	www.cve.org/CVERecord
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2020-19188
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-19188
t	www.t.me/cvenotify/63203
support	www.support.apple.com/en-us/HT214037
support	www.support.apple.com/kb/HT214038

13 Dec 2023 00:00Current

5Medium risk

Vulners AI Score5

CVSS 3.16.5

EPSS0.07292