CVE-2023-29491CWE-787

CVE-2023-29491

High · published April 14, 2023

CVSS v3.1
7.8
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00979 · 61.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2023-04-14T05:15Z
Affected products (1)
ProductVersionsFixed in
invisible-island/ncurses< 6.46.4
References (25)
http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 · [email protected]http://www.openwall.com/lists/oss-security/2023/04/19/10 · [email protected]http://www.openwall.com/lists/oss-security/2023/04/19/11 · [email protected]https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ · [email protected]https://security.netapp.com/advisory/ntap-20230517-0009/ · [email protected]https://support.apple.com/kb/HT213843 · [email protected]https://support.apple.com/kb/HT213844 · [email protected]https://support.apple.com/kb/HT213845 · [email protected]https://www.openwall.com/lists/oss-security/2023/04/12/5 · [email protected]https://www.openwall.com/lists/oss-security/2023/04/13/4 · [email protected]http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2023/04/19/10 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2023/04/19/11 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20230517-0009/ · af854a3a-2127-422b-91ae-364da2661108https://support.apple.com/kb/HT213843 · af854a3a-2127-422b-91ae-364da2661108https://support.apple.com/kb/HT213844 · af854a3a-2127-422b-91ae-364da2661108https://support.apple.com/kb/HT213845 · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2023/04/12/5 · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2023/04/13/4 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-202008.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 14 APR 00:00Z
    ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a…
    cvelistv5