There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
Fix
Patch, vendor advisory and mitigation references on NVD 4
- https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html Exploit, Mailing List, Vendor Advisory
- https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html Mailing List, Patch, Vendor Advisory
- https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html Exploit, Mailing List, Vendor Advisory
- https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html Mailing List, Patch, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.4 · invisible-island, opensuseNVD modified 2026-10-14 07:16
Affected (CPE criteria) 3
cpe:2.3:a:invisible-island:ncurses:*:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
References 11
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html Third Party Advisory
- https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html Exploit, Mailing List, Vendor Advisory
- https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html Mailing List, Patch, Vendor Advisory
- https://security.gentoo.org/glsa/202101-28 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html Third Party Advisory
- https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html Exploit, Mailing List, Vendor Advisory
- https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html Mailing List, Patch, Vendor Advisory
- https://security.gentoo.org/glsa/202101-28 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html