Lucene search
+L

1202 matches found

OSV
OSV
added 2021/09/20 4:15 p.m.26 views

CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

8.8CVSS4.1AI score
SaveExploits0References12
UbuntuCve
UbuntuCve
added 2021/09/20 4:15 p.m.51 views

CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

8.8CVSS7.1AI score0.03231EPSS
SaveExploits1References4
Prion
Prion
added 2021/09/20 4:15 p.m.21 views

Heap overflow

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

6.8CVSS8.5AI score0.03231EPSS
SaveExploits1References12Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/09/20 4:15 p.m.7 views

CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

8.8CVSS7.2AI score0.03231EPSS
SaveExploits1References13
OSV
OSV
added 2021/09/20 4:15 p.m.2 views

UBUNTU-CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

8.8CVSS7.2AI score0.03231EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/09/20 12:0 a.m.30 views

CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

8.9AI score0.03231EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.2 views

ncurses缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses that stems from Nc captoinfo in captoinfo.c has a heap-based buffer overflow...

8.8CVSS7.2AI score0.03231EPSS
SaveExploits1References21
AlpineLinux
AlpineLinux
added 2021/09/20 12:0 a.m.47 views

CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

8.8CVSS8.8AI score0.03231EPSS
SaveExploits1
CVE
CVE
added 2021/09/20 12:0 a.m.253 views

CVE-2021-39537

CVE-2021-39537 affects ncurses: _nc_captoinfo in captoinfo.c has a heap-based buffer overflow when processing terminfo data, observed in ncurses up to v6.2-1. Connected advisories confirm this is a real issue and provide mitigations/patch paths: Debian DLA-3682-1 and related Debian notes, Cloud F...

8.8CVSS8.5AI score0.03231EPSS
SaveExploits1References12Affected Software1
Debian CVE
Debian CVE
added 2021/09/20 12:0 a.m.35 views

CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...

8.8CVSS6.8AI score0.03231EPSS
SaveExploits1
OSV
OSV
added 2021/08/25 8:58 p.m.82 views

GHSA-32V7-GHPR-C8HG Mishandling of format strings in ncurses

ncurses exposes functions from the ncurses library which: Pass buffers without length to C functions that may write an arbitrary amount of data, leading to a buffer overflow. instr, mvwinstr, etc Passes rust &str to strings expecting C format arguments, allowing hostile input to execute a format...

7.5CVSS6.4AI score0.01615EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.41 views

Mishandling of format strings in ncurses

ncurses exposes functions from the ncurses library which: Pass buffers without length to C functions that may write an arbitrary amount of data, leading to a buffer overflow. instr, mvwinstr, etc Passes rust &str to strings expecting C format arguments, allowing hostile input to execute a format...

7.5CVSS8AI score0.01226EPSS
SaveExploits0References5Affected Software1
vulnersOsv
vulnersOsv
added 2021/08/25 8:58 p.m.6 views

alpha-g-analysis (=0.1.0), apecrunch (>=0.0.1 <=0.0.3) +178 more potentially affected by CVE-2019-15547 +1 more via ncurses (=5.101.0)

ncurses CARGO version =5.101.0 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - alpha-g-analysis =0.1.0 - apecrunch =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.7 - btui =0.6.5 and more Source cves: CVE-2019-15547,...

9.8CVSS7.4AI score0.01615EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.40 views

Buffer overflow and format vulnerabilities in ncurses

ncurses exposes functions from the ncurses library which: Pass buffers without length to C functions that may write an arbitrary amount of data, leading to a buffer overflow. instr, mvwinstr, etc Passes rust &str to strings expecting C format arguments, allowing hostile input to execute a format...

9.8CVSS9.3AI score0.01615EPSS
SaveExploits0References5Affected Software1
vulnersOsv
vulnersOsv
added 2021/08/25 8:58 p.m.11 views

alpha-g-analysis (=0.1.0), apecrunch (>=0.0.1 <=0.0.3) +178 more potentially affected by CVE-2019-15547 +1 more via ncurses (=5.101.0)

ncurses CARGO version =5.101.0 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - alpha-g-analysis =0.1.0 - apecrunch =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.7 - btui =0.6.5 and more Source cves: CVE-2019-15547,...

9.8CVSS7.4AI score0.01615EPSS
SaveExploits0
OSV
OSV
added 2021/08/25 8:58 p.m.10 views

GHSA-G7R5-X7CR-VM3V Buffer overflow and format vulnerabilities in ncurses

ncurses exposes functions from the ncurses library which: Pass buffers without length to C functions that may write an arbitrary amount of data, leading to a buffer overflow. instr, mvwinstr, etc Passes rust &str to strings expecting C format arguments, allowing hostile input to execute a format...

9.8CVSS6.4AI score0.01615EPSS
SaveExploits0References5
Rosalinux
Rosalinux
added 2021/07/02 5:32 p.m.53 views

Advisory ROSA-SA-2021-1927

Software: ncurses 5.9 OS: Cobalt 7.9 CVE-ID: CVE-2019-15547 CVE-Crit: HIGH CVE-DESC: An issue has been discovered in the ncurses box prior to version 5.99.0 for Rust. The printw functions have format string problems due to improper handling of C format arguments. CVE-STATUS: default CVE-REV:...

9.8CVSS7.2AI score0.02034EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.36 views

SUSE: Security Advisory (SUSE-SU-2017:2701-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.57595EPSS
SaveExploits33References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2018:0178-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.02734EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2017:3183-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.03864EPSS
SaveExploits6References10
Rows per page
Query Builder