Описание
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 6.1-1ubuntu1.18.04.1 |
| devel | released | 6.1+20191019-1ubuntu1 |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-infra-legacy/trusty | not-affected | 5.9+20140118-1ubuntu1+esm2 |
| esm-infra/bionic | not-affected | 6.1-1ubuntu1.18.04.1 |
| esm-infra/focal | not-affected | 6.1+20191019-1ubuntu1 |
| esm-infra/xenial | released | 6.0+20160213-1ubuntu1+esm2 |
| focal | released | 6.1+20191019-1ubuntu1 |
| groovy | released | 6.1+20191019-1ubuntu1 |
Показывать по
EPSS
4.6 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
There is a heap-based buffer over-read in the _nc_find_entry function ...
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
Уязвимость функции _nc_find_entry библиотеки ncurses, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
EPSS
4.6 Medium
CVSS2
5.3 Medium
CVSS3