Summary
It was discovered that ncurses incorrectly handled certain function return
values, possibly leading to segmentation fault. A local attacker could possibly
use this to cause a denial of service (system crash).
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | ncurses | 5.9+20140118-1ubuntu1+esm5 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | ncurses | 6.0+20160213-1ubuntu1+esm5 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | ncurses | 6.1-1ubuntu1.18.04.1+esm2 |
Vulnerabilities 1
-
Unscored —
NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().
References
-
report
https://ubuntu.com/security/CVE-2023-50495