Red Hat Security AdvisoryRHSA-2023:6698
ncurses security and bug fix update
Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) ncurses-c++-libs-6.2-10.20210508.el9, ncurses-devel-6.2-10.20210508.el9, ncurses-term-6.2-10.20210508.el9
- Red Hat Enterprise Linux BaseOS (v. 9) ncurses-6.2-10.20210508.el9, ncurses-base-6.2-10.20210508.el9, ncurses-libs-6.2-10.20210508.el9
Fixes 1 record
Priority LOW 38
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00979 · Published 2023-04-14 · Partial fix CWE-787
