Описание
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
Ссылки
- Third Party Advisory
- Third Party Advisory
- ExploitMailing ListVendor Advisory
- Mailing ListPatchVendor Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- ExploitMailing ListVendor Advisory
- Mailing ListPatchVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Одно из
EPSS
5.4 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
Связанные уязвимости
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
There is a heap-based buffer over-read in the fmt_entry function in ti ...
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
Уязвимость функции fmt_entry function библиотеки ncurses, позволяющая нарушителю раскрыть защищаемую информацию и вызвать отказ в обслуживании
EPSS
5.4 Medium
CVSS3
5.8 Medium
CVSS2