Advisory ROSA-SA-2024-2437

Software: ncurses 6.1
OS: ROSA Virtualization 2.1

package_evr_string: ncurses-6.1

CVE-ID: CVE-2022-29458
BDU-ID: 2023-00296
CVE-Crit: MEDIUM.
CVE-DESC.: A vulnerability in the convert_strings function of the convert_strings component of the tinfo/read_entry.c component of the Ncurses terminal I/O control library is related to reading outside of valid data buffer boundaries. Exploitation of the vulnerability allows an attacker to gain access to sensitive data as well as cause a denial of service
CVE-STATUS: Not relevant
CVE-REV: