Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 6.5 · invisible-island, netappNVD modified 2026-10-14 10:17
Affected (CPE criteria) 2
cpe:2.3:a:invisible-island:ncurses:6.1:*:*:*:*:*:*:*cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*
References 17
- http://seclists.org/fulldisclosure/2023/Dec/10
- http://seclists.org/fulldisclosure/2023/Dec/11
- http://seclists.org/fulldisclosure/2023/Dec/9
- https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc1.md Exploit, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20231006-0005/ Third Party Advisory
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214037
- https://support.apple.com/kb/HT214038
- http://seclists.org/fulldisclosure/2023/Dec/10
- http://seclists.org/fulldisclosure/2023/Dec/11
- http://seclists.org/fulldisclosure/2023/Dec/9
- https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc1.md Exploit, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20231006-0005/ Third Party Advisory
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214037
- https://support.apple.com/kb/HT214038
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html