229 matches found
CentOS Linux 6 [TuxCare] Security Update: ncurses / ncurses-base / ncurses-devel / ncurses-libs / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792807491)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792807491 advisory. - An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow. CVE-2021-39537 - ncurs...
ncurses: Fix of 2 CVEs
CVE-2021-39537: fix heap buffer overflow in nccaptoinfo with a crafted termcap entry - CVE-2023-29491: ignore terminfo/termcap environment variables in setuid/setgid programs --disable-root-environ...
CLSA-2026-1792806631 ncurses: Fix of 2 CVEs
CVE-2021-39537: fix heap buffer overflow in nccaptoinfo with a crafted termcap entry - CVE-2023-29491: ignore terminfo/termcap environment variables in setuid/setgid programs --disable-root-environ...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : ncurses vulnerability (USN-8709-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8709-1 advisory. It was discovered that ncurses incorrectly handled specially crafted terminfo database entries. A loca...
CentOS Linux 7 [TuxCare] Security Update: ncurses / ncurses-base / ncurses-devel / ncurses-libs / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1710789286)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1710789286 advisory. - An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow. CVE-2021-39537 - ncurs...
AlmaLinux 9.2 [TuxCare] Security Update: ncurses / ncurses-base / ncurses-c++-libs / ncurses-compat-libs / etc (ALMALINUX9.2:CLSA-2025:1739387560)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739387560 advisory. - ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security- relevant memory corruption via...
Astra Linux – Vulnerability in ncurses
A buffer overflow vulnerability exists in the postprocessterminfo function in tinfo/parseentry.c:997 within ncurses 6.1. This vulnerability allows remote attackers to cause a denial of service by using crafted commands...
Astra Linux – Vulnerability in ncurses
ncurses before version 6.4, as of 20230408, when used by a setuid application, allowed local users to cause security-related memory corruption through malformed data in a terminfo database file located in $HOME/.terminfo, or accessible via the TERMINFO or TERM environment variables...
USN-8709-1 ncurses vulnerability
It was discovered that ncurses incorrectly handled specially crafted terminfo database entries. A local attacker could possibly use this issue to cause applications using ncurses to crash, resulting in a denial of service...
USN-8709-1: ncurses vulnerability
It was discovered that ncurses incorrectly handled specially crafted terminfo database entries. A local attacker could possibly use this issue to cause applications using ncurses to crash, resulting in a denial of service...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : ncurses vulnerability (USN-8503-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8503-1 advisory. It was discovered that ncurses incorrectly handled certain terminfo entries in the infocmp tool. An attacker could possibly us...
USN-8503-1 ncurses vulnerability
It was discovered that ncurses incorrectly handled certain terminfo entries in the infocmp tool. An attacker could possibly use this issue to cause a denial of service via a crafted terminfo file. The default compiler options for affected releases should reduce the vulnerability to a denial of...
USN-8503-1: ncurses vulnerability
It was discovered that ncurses incorrectly handled certain terminfo entries in the infocmp tool. An attacker could possibly use this issue to cause a denial of service via a crafted terminfo file. The default compiler options for affected releases should reduce the vulnerability to a denial of...
JLSEC-2026-453
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable...
JLSEC-2026-443
There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...
JLSEC-2026-444
There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...
JLSEC-2026-452
ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convertstrings in tinfo/readentry.c in the terminfo library...
PT-2026-41331
Buffer Overflow vulnerability in postprocess terminfo function in tinfo/parse entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...