CVE-2019-17594

CVE-2019-17594 affects ncurses’ terminfo library (ncurses) prior to 6.1-20191012. The issue is a heap-based over-read in the _nc_find_entry function in tinfo/comp_hash.c, which could allow an attacker to read memory and potentially obtain sensitive information from a crafted file. This aligns wit...

CVE-2019-17595

CVE-2019-17595 affects ncurses' terminfo library (ncurses) prior to 6.1-20191012, due to a heap-based buffer over-read in the fmt_entry function (tinfo/comp_hash.c). This over-read can leak memory contents and may contribute to instability; CVSS v3.1 base score 5.4 (medium) with Network attack ve...

CVE-2018-19211

CVE-2018-19211: In ncurses 6.1, a NULL pointer dereference in _nc_parse_entry (parse_entry.c) can cause a denial of service by following the dereference path even after detecting a dubious character in the name/alias field. The provided documents identify the vulnerable component as ncurses 6.1 a...