CVE-2020-19189

Опубликовано: 22 авг. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

Ссылки

http://seclists.org/fulldisclosure/2023/Dec/10
http://seclists.org/fulldisclosure/2023/Dec/11
http://seclists.org/fulldisclosure/2023/Dec/9
https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc5.md
Exploit
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00033.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20231006-0005/
Third Party Advisory
https://support.apple.com/kb/HT214036
https://support.apple.com/kb/HT214037
https://support.apple.com/kb/HT214038
http://seclists.org/fulldisclosure/2023/Dec/10
http://seclists.org/fulldisclosure/2023/Dec/11
http://seclists.org/fulldisclosure/2023/Dec/9
https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc5.md
Exploit
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00033.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20231006-0005/
Third Party Advisory
https://support.apple.com/kb/HT214036
https://support.apple.com/kb/HT214037
https://support.apple.com/kb/HT214038

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:ncurses:6.1:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01948

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2020-19189

CVSS3: 6.5

ubuntu

больше 2 лет назад

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVE-2020-19189

CVSS3: 6.5

redhat

почти 7 лет назад

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVE-2020-19189

CVSS3: 6.5

debian

больше 2 лет назад

Buffer Overflow vulnerability in postprocess_terminfo function in tinf ...

GHSA-gx38-wj66-8wfr

CVSS3: 6.5

github

больше 2 лет назад

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

BDU:2024-06965

CVSS3: 6.5

fstec

почти 7 лет назад

Уязвимость функции postprocess_terminfo() компонента tinfo/parse_entry.c библиотеки управления вводом-выводом на терминал Ncurses, связанная с записью за границами буфера, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 83%

0.01948

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-787