Yüksek CVSS 7.8 PoC var
CVE-2023-29491: Ncurses: sınır dışı yazma
Açıklama (NVD)
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
Özet bilgiler
- Ürün
- Invisible-island Ncurses
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,98 (yüzdelik 62)
- CWE
- CWE-787
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| invisible-island-ncurses | — | — | 6.4 |
Kaynaklar
- NVD kaydı
- ncurses.scripts.mit.edu
- www.openwall.com
- www.openwall.com
- lists.debian.org
- lists.fedoraproject.org
- security.netapp.com
- support.apple.com
- support.apple.com
- support.apple.com
- www.openwall.com
- www.openwall.com
- ncurses.scripts.mit.edu
- www.openwall.com
- www.openwall.com
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.netapp.com
- support.apple.com
- support.apple.com
- support.apple.com
- www.openwall.com
- www.openwall.com
- cert-portal.siemens.com
- CWE-787