Описание
ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.
Отчет
Red Hat Product Security classifies this issue as having a Low security impact. This vulnerability is present in the tic program which is only used at build-time and does not exist in libncurses. The exploit can only be triggered if the user performs a specific action, such as processing terminfo from source to compiled form using trusted input, which limits the practical impact.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | ncurses | Not affected | ||
| Red Hat Enterprise Linux 7 | ncurses | Not affected | ||
| Red Hat Enterprise Linux 8 | ncurses | Not affected | ||
| Red Hat Enterprise Linux 9 | ncurses | Fixed | RHSA-2025:12876 | 05.08.2025 |
| Red Hat Enterprise Linux 9 | ncurses | Fixed | RHSA-2025:12876 | 05.08.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.
ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.
ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmen ...
EPSS
6.1 Medium
CVSS3