Published: 22/08/2023 Updated: 13/12/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote malicious users to cause a denial of service via crafted command.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu ncurses 6.1
netapp active iq unified manager -

There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hashc in the terminfo library in ncurses before 61-20191012 (CVE-2019-17594) There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hashc in the terminfo library in ncurses before 61-20191012 (CVE-2019-17595) Buffer Overflow vulnerabili ...

DescriptionThe MITRE CVE dictionary describes this issue as: Buffer Overflow vulnerability in fmt_entry function in progs/dump_entryc:1116 in ncurses 61 allows remote attackers to cause a denial of service via crafted command ...

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-787 https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc4.md https://security.netapp.com/advisory/ntap-20231006-0005/https://support.apple.com/kb/HT214038 https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214037 http://seclists.org/fulldisclosure/2023/Dec/9 http://seclists.org/fulldisclosure/2023/Dec/10 http://seclists.org/fulldisclosure/2023/Dec/11 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2024-2412.html https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10

CVE-2020-19188

Vulnerability Summary

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect