Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2020-19187

Published: 22/08/2023 Updated: 13/12/2023
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote malicious users to cause a denial of service via crafted command.

Vulnerable Product Search on Vulmon Subscribe to Product

gnu ncurses 6.1

netapp active iq unified manager -

Vendor Advisories

Amazon Linux 2: ALAS-2024-2412
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hashc in the terminfo library in ncurses before 61-20191012 (CVE-2019-17594) There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hashc in the terminfo library in ncurses before 61-20191012 (CVE-2019-17595) Buffer Overflow vulnerabili ...
Red Hat:
DescriptionThe MITRE CVE dictionary describes this issue as: Buffer Overflow vulnerability in fmt_entry function in progs/dump_entryc:1100 in ncurses 61 allows remote attackers to cause a denial of service via crafted command ...
Apple: macOS Sonoma 14.2
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: macOS Ventura 13.6.3
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: macOS Monterey 12.7.2
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...

ICS Advisories

https://ics-cert.us-cert.gov/advisories/fd87a3fc00e025fdc5034360097d2bdf
Critical Infrastructure Sectors: Critical Manufacturing

Mailing Lists

Full Disclosure: APPLE-SA-12-11-2023-5 macOS Ventura 13.6.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-12-11-2023-5 macOS Ventura 1363 macOS Ventura 1363 addresses the following issues Information about the security content is also available at supportapplecom/kb/HT214038 Apple maintains a Security Updates page at supportapplecom/HT201222 which lists recent softwar ...
Full Disclosure: APPLE-SA-12-11-2023-6 macOS Monterey 12.7.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-12-11-2023-6 macOS Monterey 1272 macOS Monterey 1272 addresses the following issues Information about the security content is also available at supportapplecom/kb/HT214037 Apple maintains a Security Updates page at supportapplecom/HT201222 which lists recent softw ...
Full Disclosure: APPLE-SA-12-11-2023-4 macOS Sonoma 14.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-12-11-2023-4 macOS Sonoma 142 macOS Sonoma 142 addresses the following issues Information about the security content is also available at supportapplecom/kb/HT214036 Apple maintains a Security Updates page at supportapplecom/HT201222 which lists recent software upda ...

References

CWE-787https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc3.mdhttps://security.netapp.com/advisory/ntap-20231006-0005/https://support.apple.com/kb/HT214038https://support.apple.com/kb/HT214036https://support.apple.com/kb/HT214037http://seclists.org/fulldisclosure/2023/Dec/9http://seclists.org/fulldisclosure/2023/Dec/10http://seclists.org/fulldisclosure/2023/Dec/11https://nvd.nist.govhttps://alas.aws.amazon.com/AL2/ALAS-2024-2412.htmlhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20065open redirectCVE-2024-1086path traversalCVE-2024-29825XXECVE-2024-29822CVE-2024-20696CVE-2024-3564
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook