Описание
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mishandled.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.99.0 (включая)
cpe:2.3:a:ncurses_project:ncurses:*:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.01615
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-119
Связанные уязвимости
CVSS3: 9.8
ubuntu
около 7 лет назад
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mishandled.
CVSS3: 9.8
debian
около 7 лет назад
An issue was discovered in the ncurses crate through 5.99.0 for Rust. ...
CVSS3: 9.8
github
около 5 лет назад
Buffer overflow and format vulnerabilities in ncurses
CVSS3: 9.8
altlinux
больше 8 лет назад
ALT-PU-2018-1601: package `ncurses` update to version 6.1.20180407-alt1
EPSS
Процентиль: 76%
0.01615
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-119