Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 28

Export CSV
CVE-2023-29491

ncurses: Local users can trigger security-relevant memory corruption via malformed data

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Invisible-island Redhat
Products
Ncurses Enterprise Linux Rhel Eus
CVE-2020-19190

ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Invisible-island Netapp
Products
Ncurses Active Iq Unified Manager
CVE-2020-19188

ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Invisible-island Netapp
Products
Ncurses Active Iq Unified Manager
CVE-2020-19187

ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Invisible-island Netapp
Products
Ncurses Active Iq Unified Manager
CVE-2020-19186

ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Invisible-island Netapp
Products
Ncurses Active Iq Unified Manager
CVE-2020-19185

ncurses: Heap buffer overflow in one_one_mapping function in progs/dump_entry.c:1373

Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Invisible-island Netapp
Products
Ncurses Active Iq Unified Manager
CVE-2019-17594

ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Invisible-island Opensuse Redhat
Products
Ncurses Leap Enterprise Linux
CVE-2021-39537

ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.

CVSS 3.1 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Apple Invisible-island
Products
Mac Os X Macos Ncurses
CVE-2025-69720

ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Gnu Invisible-island
Products
Ncurses Ncurses
CVE-2002-0062

security flaw

Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Debian Freebsd Invisible-island and 2 more
Products
Debian Linux Freebsd Ncurses and 2 more
CVE-2017-10684

ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c

In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

CVSS 3.0 · 9.8 Critical EPSS 4.9% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-10685

ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

CVSS 3.1 · 0.0 Low EPSS 4.3% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-16879

ncurses: Stack-based buffer overflow in the _nc_write_entry function

Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic.

CVSS 3.1 · 7.8 High EPSS 2.4% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-13734

ncurses: Illegal address access in the function _nc_safe_strcat

There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-13733

ncurses: Illegal address access in the function fmt_entry

There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses
CVE-2017-13732

ncurses: Illegal address access in the function dump_uses()

There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Invisible-island
Products
Ncurses