Ncurses vulnerabilities

2 known vulnerabilities in Ncurses from Invisible-island. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Out-of-bounds Write

  CVE-2023-29491Apr 14, 2023Siemens

  ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment va

• 7.1 High severity

  Ncurses: Out-of-bounds Read

  CVE-2022-29458Apr 18, 2022Invisible-islandEPSS 1.33%

  ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.