CVE-2022-29458

CVE-2022-29458 affects ncurses 6.3 prior to patch 20220416, with an out-of-bounds read in tinfo/read_entry.c (convert_strings) leading to a segmentation fault. Connected sources confirm the issue is tied to the terminfo processor and mention Linux distributions (e.g., Astra Linux, Cloud Foundry) ...

CVE-2023-29491

CVE-2023-29491 affects ncurses up to version 6.3? (before 6.4 20230408) and is exploitable locally when used by a setuid application to trigger memory corruption via malformed data in a terminfo database file found in $HOME/.terminfo or via TERMINFO/TERM. The issue is a local memory corruption vu...

CVE-2017-16879

CVE-2017-16879 affects ncurses: a stack-based buffer overflow in the _nc_write_entry function (tinfo/write_entry.c) can be triggered by a crafted terminfo file. This may cause an application crash (DoS) and could possibly lead to arbitrary code execution. The connected documents provide this conc...

CVE-2017-13728

CVE-2017-13728 affects ncurses 6.0 (ncurses) with an infinite loop in the next_char function (comp_scan.c) tied to libtic. A crafted input can trigger a remote denial-of-service via an infinite loop. The connected Nessus plugin explicitly lists this CVE under “ncurses 6.0” with the next_char issu...

CVE-2017-11112

CVE-2017-11112 affects ncurses 6.0. The vulnerability is in the append_acs path of tinfo/parse_entry.c, where an attempted 0xffffffffffffffff access could be triggered while processing untrusted terminfo data, leading to a remote denial of service. The connected documents explicitly describe this...

CVE-2017-11113

CVE-2017-11113 (ncurses) : A NULL pointer dereference in _nc_parse_entry (tinfo/parse_entry.c) of ncurses 6.0 can allow a remote attacker to cause a denial of service when processing untrusted terminfo data. The entry cites an IBM X-Force base score of 7.5 (HIGH) and references to Linux/Unix term...

CVE-2002-0062

CVE-2002-0062 is a local privilege-escalation in ncurses 5.0 and the ncurses4 compatibility package, caused by a buffer overflow in routines for moving the physical cursor and scrolling. Debian and Red Hat advisories describe the issue and assign CAN-2002-0062. Affected products include ncurses 5...

CVE-2000-0963

The CVE-2000-0963 vulnerability is a local buffer overflow in the ncurses library that can allow execution of arbitrary commands via overly long environment variables (TERM or TERMINFO_DIRS). Connected PT-2000-1003 and other records specify affected software as ncurses versions 5.0–5.2 and ncurse...