ncurses vulnerabilities

In ncurses 6.0, a format string vulnerability exists in the fmt_entry function. A crafted input can lead to remote arbitrary code execution.

In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input can lead to remote arbitrary code execution.

A buffer overflow vulnerability was found in ncurses 6.1 in the _nc_find_entry function in tinfo/comp_hash.c:70. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

In ncurses 6.1, a buffer overflow vulnerability in the postprocess_terminfo function in tinfo/parse_entry.c:997 allows a remote attacker to cause a denial of service via a crafted command.

A buffer overflow vulnerability was found in ncurses 6.1 in the fmt_entry function in progs/dump_entry.c:1116. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

A buffer overflow vulnerability was found in ncurses 6.1 in the fmt_entry function in progs/dump_entry.c:1100. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

A buffer overflow vulnerability was detected in ncurses version 6.1 in the _nc_find_entry function in tinfo/comp_hash.c:66. A remote attacker can cause a denial of service via a crafted command.

A buffer overflow vulnerability was found in ncurses 6.1 in the one_one_mapping function in progs/dump_entry.c:1373. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

A vulnerability in ncurses before version 6.4 20230408 allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file located in $HOME/.terminfo or accessed via the TERMINFO or TERM environment variable, when used by a setuid application.

In the ncurses library version 6.3 before patch 20220416, an out-of-bounds read and segmentation violation exist in the convert_strings function in tinfo/read_entry.c of the terminfo library.

The ncurses library up to version v6.2-1 contains a heap-based buffer overflow vulnerability in the _nc_captoinfo function in captoinfo.c.

A heap-based buffer over-read exists in the terminfo library of ncurses before version 6.1-20191012 in the fmt_entry function in tinfo/comp_hash.c.

A heap-based buffer over-read exists in the terminfo library of ncurses before version 6.1-20191012 in the _nc_find_entry function in tinfo/comp_hash.c.

A NULL pointer dereference vulnerability has been found in the ncurses library, possibly version 6.x, in the function _nc_name_match, which can lead to a denial of service attack.

In ncurses 6.1, a null pointer dereference in the _nc_parse_entry function in parse_entry.c leads to a denial of service attack. The program proceeds to the dereference code path even after detecting a "dubious character `*' in name or alias field".

In ncurses 6.0, a stack-based buffer overflow was found in the _nc_write_entry function of tinfo/write_entry.c. Attackers can cause a denial of service or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic.

There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.

An illegal memory access was found in ncurses 6.0 in the fmt_entry function in progs/dump_entry.c, potentially leading to a remote denial of service attack.

An illegal memory access was found in ncurses 6.0 in the dump_uses() function in progs/dump_entry.c, potentially leading to a remote denial of service attack.

An illegal memory access was found in ncurses 6.0 in the postprocess_termcap() function in parse_entry.c, leading to a remote denial of service attack.

An illegal memory access was found in ncurses 6.0 in the _nc_read_entry_source() function in progs/tic.c, potentially leading to a remote denial of service attack.

An illegal memory access was found in ncurses 6.0 in the _nc_save_str function in alloc_entry.c, leading to a remote denial of service attack.

Infinite loop in the next_char function in comp_scan.c of ncurses 6.0. A crafted input can lead to a remote denial of service attack.

In ncurses 6.0, a NULL pointer dereference was found in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library processes untrusted terminfo data.

In ncurses 6.0, an attempted access to address 0xffffffffffffffff was found in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library processes untrusted terminfo data.

A buffer overflow in ncurses 5.0 and the ncurses4 compatibility package in Red Hat Linux, related to cursor movement and scrolling routines, allows local users to gain privileges.

A buffer overflow vulnerability was found in the ncurses library that allows a local user to execute arbitrary commands via long environmental variables such as TERM or TERMINFO_DIRS.