Red Hat Security AdvisoryRHSA-2021:4426
ncurses security update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) ncurses-6.1-9.20180224.el8, ncurses-base-6.1-9.20180224.el8, ncurses-c++-libs-6.1-9.20180224.el8 +4
Fixes 2 records
Priority LOW 29
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.02224 · Published 2019-10-14 · Partial fix CWE-125
Priority LOW 25
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00548 · Published 2019-10-14 · Partial fix CWE-125
