Описание
There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 6.1-1ubuntu1 |
| cosmic | not-affected | 6.1-1ubuntu1 |
| devel | not-affected | 6.1-1ubuntu1 |
| disco | not-affected | 6.1-1ubuntu1 |
| eoan | not-affected | 6.1-1ubuntu1 |
| esm-infra-legacy/trusty | released | 5.9+20140118-1ubuntu1+esm1 |
| esm-infra/bionic | not-affected | 6.1-1ubuntu1 |
| esm-infra/focal | not-affected | 6.1-1ubuntu1 |
| esm-infra/xenial | released | 6.0+20160213-1ubuntu1+esm1 |
Показывать по
EPSS
4.3 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.
There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.
There is an infinite loop in the next_char function in comp_scan.c in ...
There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.
EPSS
4.3 Medium
CVSS2
7.5 High
CVSS3