Описание
In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 6.1-1ubuntu1.18.04 |
| cosmic | not-affected | 6.1+20180210-4ubuntu1 |
| devel | not-affected | 6.3+20220423-2 |
| disco | not-affected | 6.1+20180210-4ubuntu1 |
| eoan | not-affected | 6.1+20180210-4ubuntu1 |
| esm-infra-legacy/trusty | released | 5.9+20140118-1ubuntu1+esm2 |
| esm-infra/bionic | released | 6.1-1ubuntu1.18.04 |
| esm-infra/focal | not-affected | 6.2-0ubuntu2 |
| esm-infra/xenial | released | 6.0+20160213-1ubuntu1+esm2 |
| focal | not-affected | 6.2-0ubuntu2 |
Показывать по
4.3 Medium
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.
In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.
In ncurses 6.1, there is a NULL pointer dereference at function _nc_pa ...
4.3 Medium
CVSS2
5.5 Medium
CVSS3