Skip to content
OpenAdvisories
Low USN-8709-1 1 CVE

ncurses vulnerability

Published Sep 1, 2026 · Updated Sep 2, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ncurses incorrectly handled specially crafted
terminfo database entries. A local attacker could possibly use this issue
to cause applications using ncurses to crash, resulting in a denial of
service.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS ncurses 6.3-2ubuntu0.3
Ubuntu · 24.04 LTS 24.04:LTS ncurses 6.4+20240113-1ubuntu2.2
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS ncurses 5.9+20140118-1ubuntu1+esm7
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS ncurses 6.0+20160213-1ubuntu1+esm7
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS ncurses 6.1-1ubuntu1.18.04.1+esm4
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS ncurses 6.2-0ubuntu2.1+esm2

Vulnerabilities 1

  • Low 3.3
    CVE-2025-6141

    GNU ncurses parse_entry.c postprocess_termcap stack-based overflow

    A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack need…

    GNU ncurses ncurses ncurses Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-6141