NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().
Fix
Patch, vendor advisory and mitigation references on NVD 4
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html Mailing List, Patch
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html Mailing List, Patch
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html Mailing List, Patch
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html Mailing List, Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.5 · invisible-islandNVD modified 2026-10-15 01:17
Affected (CPE criteria) 1
cpe:2.3:a:invisible-island:ncurse:6.4-20230418:*:*:*:*:*:*:*
References 10
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html Mailing List, Patch
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html Mailing List, Patch
- https://security.netapp.com/advisory/ntap-20240119-0008/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html Mailing List, Patch
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html Mailing List, Patch
- https://security.netapp.com/advisory/ntap-20240119-0008/
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html