CVE-2021-39537

2021-09-2016:15:12

Alpine Linux Development Team

security.alpinelinux.org

ncurses buffer overflow unix

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.008

Percentile

82.2%

JSON

An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchncurses< 6.2_p20200530-r0UNKNOWN
Alpine3.12-mainnoarchncurses< 6.2_p20200523-r1UNKNOWN
Alpine3.13-mainnoarchncurses< 6.2_p20200530-r0UNKNOWN
Alpine3.14-mainnoarchncurses< 6.2_p20200530-r0UNKNOWN
Alpine3.15-mainnoarchncurses< 6.2_p20200530-r0UNKNOWN
Alpine3.16-mainnoarchncurses< 6.2_p20200530-r0UNKNOWN
Alpine3.17-mainnoarchncurses< 6.2_p20200530-r0UNKNOWN
Alpine3.18-mainnoarchncurses< 6.2_p20200530-r0UNKNOWN
Alpine3.19-mainnoarchncurses< 6.2_p20200530-r0UNKNOWN
Alpine3.20-mainnoarchncurses< 6.2_p20200530-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	ncurses	< 6.2_p20200530-r0	UNKNOWN
Alpine	3.12-main	noarch	ncurses	< 6.2_p20200523-r1	UNKNOWN
Alpine	3.13-main	noarch	ncurses	< 6.2_p20200530-r0	UNKNOWN
Alpine	3.14-main	noarch	ncurses	< 6.2_p20200530-r0	UNKNOWN
Alpine	3.15-main	noarch	ncurses	< 6.2_p20200530-r0	UNKNOWN
Alpine	3.16-main	noarch	ncurses	< 6.2_p20200530-r0	UNKNOWN
Alpine	3.17-main	noarch	ncurses	< 6.2_p20200530-r0	UNKNOWN
Alpine	3.18-main	noarch	ncurses	< 6.2_p20200530-r0	UNKNOWN
Alpine	3.19-main	noarch	ncurses	< 6.2_p20200530-r0	UNKNOWN
Alpine	3.20-main	noarch	ncurses	< 6.2_p20200530-r0	UNKNOWN