Описание
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 6.1-1ubuntu1 |
| cosmic | not-affected | 6.1-1ubuntu1 |
| devel | not-affected | 6.1-1ubuntu1 |
| disco | not-affected | 6.1-1ubuntu1 |
| eoan | not-affected | 6.1-1ubuntu1 |
| esm-infra-legacy/trusty | released | 5.9+20140118-1ubuntu1+esm1 |
| esm-infra-legacy/xenial | released | 6.0+20160213-1ubuntu1+esm1 |
| esm-infra/bionic | not-affected | 6.1-1ubuntu1 |
| esm-infra/focal | not-affected | 6.1-1ubuntu1 |
Показывать по
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entr ...
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3