NC
Product
Ncurses
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 16Low 0
Watch
Add Ncurses to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-19186 | 6.5 | Aug 22 | Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: 6.1 |
| CVE-2020-19190 | 6.5 | Aug 22 | Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: 6.1 |
| CVE-2020-19189 | 6.5 | Aug 22 | Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: 6.1 |
| CVE-2020-19187 | 6.5 | Aug 22 | Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: 6.1 |
| CVE-2020-19188 | 6.5 | Aug 22 | Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: 6.1 |
| CVE-2020-19185 | 6.5 | Aug 22 | Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command Affected: 6.1 |
| CVE-2018-19217 | 6.5 | Nov 12 | In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack Affected: 6.1 |
| CVE-2017-13734 | 6.5 | Aug 29 | There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack Affected: 6.0 |
| CVE-2017-13733 | 6.5 | Aug 29 | There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack Affected: 6.0 |
| CVE-2017-13732 | 6.5 | Aug 29 | There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack Affected: 6.0 |
| CVE-2017-13731 | 6.5 | Aug 29 | There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack Affected: 6.0 |
| CVE-2017-13730 | 6.5 | Aug 29 | There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack Affected: 6.0 |
| CVE-2017-13729 | 6.5 | Aug 29 | There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0 Affected: 6.0 |
| CVE-2018-19211 | 5.5 | Nov 12 | In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack Affected: 6.1 |
| CVE-2019-17595 | 5.4 | Oct 14 | There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012 Affected: before 6.2 |
| CVE-2019-17594 | 5.3 | Oct 14 | There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012 Affected: before 6.2 |
Showing 16
