Advisory ROSA-SA-2023-2263

software: ncurses 6.2
WASP: ROSA-CHROME

package_evr_string: ncurses-6.2-6.src.rpm

CVE-ID: CVE-2022-29458
BDU-ID: 2023-00296
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the convert_strings function of the convert_strings component of the tinfo/read_entry.c component of the Ncurses terminal I/O control library is related to reading outside of valid data buffer boundaries. Exploitation of the vulnerability allows an attacker to gain access to sensitive data as well as cause a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update ncurses