PT-2017-11748

Name of the Vulnerable Software and Affected Versions ncurses version 6.0 Description The issue is related to an attempted 0xffffffffffffffff access in the append acs function of tinfo/parse entry.c. This could potentially lead to a remote denial of service attack if the terminfo library code is...

CVE-2017-11113: NULL Pointer Dereference

In ncurses 6.0, there is a NULL Pointer Dereference in the ncparseentry function of tinfo/parseentry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data...

[SECURITY] New Debian ncurses packages released

Package: ncurses Vulnerability: local privilege escalation Debian-specific: no Vulnerable: yes The version of the ncurses display library shipped with Debian GNU/Linux 2.2 is vulnerable to several buffer overflows in the parsing of terminfo database files. This problem was discovered by Jouko...

ncurses-overflow.txt

OVERVIEW The CRT screen handling library ncurses contains buffer overflows, making programs using it vulnerable. If the programs are setuid or setgid, a local user may elevate their privilege. The problem exists in ncurses versions 4.2 and 5.0, probably earlier, and libocurses. The overflows can ...

ncurses buffer overflows

OVERVIEW The CRT screen handling library ncurses contains buffer overflows, making programs using it vulnerable. If the programs are setuid or setgid, a local user may elevate their privilege. The problem exists in ncurses versions 4.2 and 5.0, probably earlier, and libocurses. The overflows can ...