UbuntuUpdates.org

Bugs fixes in "ncurses"

Origin Bug number Title Date fixed
CVE CVE-2023-29491 ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data 2023-05-23
CVE CVE-2022-29458 ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo libra 2023-05-23
CVE CVE-2021-39537 An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow. 2023-05-23
CVE CVE-2023-29491 ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data 2023-05-23
CVE CVE-2022-29458 ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo libra 2023-05-23
CVE CVE-2021-39537 An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow. 2023-05-23
CVE CVE-2023-29491 ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data 2023-05-23
CVE CVE-2022-29458 ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo libra 2023-05-23
CVE CVE-2023-29491 ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data 2023-05-23
CVE CVE-2022-29458 ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo libra 2023-05-23
CVE CVE-2018-10754 In ncurses before 6.1.20180414, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote 2018-06-04
Debian 898666 ncurses-base: include screen.xterm-256color terminfo entry - Debian Bug report logs 2018-06-04
Launchpad 1772872 Provide screen.xterm-256color and rxvt-unicode-256color terminfo entries in ncurses-base 2018-06-04
CVE CVE-2018-10754 In ncurses before 6.1.20180414, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote 2018-05-24
Debian 898666 ncurses-base: include screen.xterm-256color terminfo entry - Debian Bug report logs 2018-05-24
Launchpad 1772872 Provide screen.xterm-256color and rxvt-unicode-256color terminfo entries in ncurses-base 2018-05-24



About   -   Send Feedback to @ubuntu_updates