Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 37

Export CSV
CVE-2017-13734

ncurses: Illegal address access in the function _nc_safe_strcat

There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-13733

ncurses: Illegal address access in the function fmt_entry

There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-13732

ncurses: Illegal address access in the function dump_uses()

There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-13731

ncurses: Illegal address access in the function postprocess_termcap()

There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-13730

ncurses: Illegal address access in the function _nc_read_entry_source()

There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-13729

ncurses: Illegal address access in the _nc_save_str function

There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-13728

ncurses: Infinite loop in the next_char function

There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 7.5 High EPSS 4.2% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-11113

ncurses: Null pointer dereference vulnerability in _nc_parse_entry function

In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-10684

ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c

In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

CVSS 3.0 · 9.8 Critical EPSS 4.9% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-16879

ncurses: Stack-based buffer overflow in the _nc_write_entry function

Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic.

CVSS 3.1 · 7.8 High EPSS 2.4% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-11112

ncurses: Illegal address access in append_acs function

In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-10685

ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

CVSS 3.1 · 0.0 Low EPSS 4.3% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2023-40359

xterm: ReGIS reporting for character-set names containing characters other than alphanumerics or underscore.

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Invisible-island
Products
Xterm
CVE-2021-27135

xterm: crash when processing combining characters

xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.

CVSS 3.1 · 9.8 Critical EPSS 7.9% KEV · Not listed
Vendors
Debian Fedoraproject Invisible-island and 1 more
Products
Debian Linux Fedora Xterm and 2 more
CVE-2018-19217

ncurses: Null pointer dereference at function _nc_name_match

In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not reproduce for that version according to the maintainer or a reliable third-party

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2018-19211

ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses