PT-2019-5181 · Ncurses+8 · Ncurses+8
Zjuchenyuan
·
Publicado
2019-10-13
·
Atualizado
2023-05-23
·
CVE-2019-17595
CVSS v2.0
5.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
ncurses versions prior to 6.1-20191012
Description
The issue is related to a heap-based buffer over-read in the
fmt entry function in tinfo/comp hash.c of the terminfo library. This could allow a remote attacker to disclose protected information and cause a denial of service.Recommendations
For versions prior to 6.1-20191012, update to version 6.1-20191012 or later to resolve the issue. As a temporary workaround, consider restricting access to the
fmt entry function in tinfo/comp hash.c until a patch is available.Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Centos
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu
Ncurses