Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-29491HistoryApr 14, 2023 - 1:15 a.m.
CVE-2023-29491
2023-04-1401:15:08
Alpine Linux Development Team
security.alpinelinux.org
155
cve-2023-29491
memory corruption
terminfo database
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0
Percentile
5.1%
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | ncurses | < 6.4_p20230424-r0 | UNKNOWN |
| Alpine | 3.15-main | noarch | ncurses | < 6.3_p20211120-r2 | UNKNOWN |
| Alpine | 3.16-main | noarch | ncurses | < 6.3_p20220521-r1 | UNKNOWN |
| Alpine | 3.17-main | noarch | ncurses | < 6.3_p20221119-r1 | UNKNOWN |
| Alpine | 3.19-main | noarch | ncurses | < 6.4_p20230424-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | ncurses | < 6.4_p20230424-r0 | UNKNOWN |
Related
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ncurses (SUSE-SU-2023:2111-1)
2023-05-09 00:00:00
EulerOS 2.0 SP11 : ncurses (EulerOS-SA-2023-2699)
2024-01-16 00:00:00
CentOS 9 : ncurses-6.2-10.20210508.el9
2024-02-29 00:00:00
prion
prion
Memory corruption
2023-04-14 01:15:00
osv
osv
CVE-2023-29491
2023-04-14 01:15:08
Moderate: ncurses security and bug fix update
2023-11-07 00:00:00
Moderate: ncurses security update
2023-09-19 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-04-24 05:19:24
cvelist
cvelist
CVE-2023-29491
2023-04-14 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2023-2989)
2023-10-13 00:00:00
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2023-2620)
2023-08-08 00:00:00
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2023-2657)
2023-09-05 00:00:00
almalinux
almalinux
Moderate: ncurses security and bug fix update
2023-11-07 00:00:00
Moderate: ncurses security update
2023-09-19 00:00:00
oraclelinux
oraclelinux
ncurses security and bug fix update
2023-11-11 00:00:00
ncurses security update
2023-09-20 00:00:00
mageia
mageia
Updated ncurses packages fix security vulnerability
2024-03-16 01:51:55
debiancve
debiancve
CVE-2023-29491
2023-04-14 01:15:08
nvd
nvd
CVE-2023-29491
2023-04-14 01:15:08
broadcom
broadcom
amazon
amazon
Important: ncurses
2023-06-21 19:11:00
Important: ncurses
2023-07-05 21:44:00
cbl_mariner
cbl_mariner
CVE-2023-29491 affecting package ncurses 6.3-2
2023-05-25 17:55:45
CVE-2023-29491 affecting package ncurses for versions less than 6.4-1
2023-05-25 09:38:10
thn
thn
redos
redos
ROS-20240404-14
2024-04-04 00:00:00
cve
cve
CVE-2023-29491
2023-04-14 01:15:08
ubuntucve
ubuntucve
redhatcve
redhatcve
CVE-2023-29491
2023-04-28 20:51:32
redhat
redhat
(RHSA-2023:6698) Moderate: ncurses security and bug fix update
2023-11-07 06:12:11
(RHSA-2023:5249) Moderate: ncurses security update
2023-09-19 12:37:09
(RHSA-2023:7361) Moderate: ncurses security update
2023-11-21 08:12:16
ibm
ibm
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0024
2023-06-13 00:00:00
debian
debian
[SECURITY] [DLA 3682-1] ncurses security update
2023-12-03 18:46:35
gentoo
gentoo
ncurses: Multiple Vulnerabilities
2024-08-09 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: ncurses-6.4-7.20230520.fc38
2024-01-31 01:42:30
cloudfoundry
cloudfoundry
USN-6099-1: ncurses vulnerabilities | Cloud Foundry
2023-06-05 00:00:00
ubuntu
ubuntu
ncurses vulnerabilities
2023-05-23 00:00:00
mssecure
mssecure
Uncursing the ncurses: Memory corruption vulnerabilities found in library
2023-09-14 11:30:00
mmpc
mmpc
Uncursing the ncurses: Memory corruption vulnerabilities found in library
2023-09-14 11:30:00
apple
apple
About the security content of macOS Big Sur 11.7.9
2023-07-24 00:00:00
About the security content of macOS Monterey 12.6.8
2023-07-24 00:00:00
About the security content of macOS Ventura 13.5
2023-07-24 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0
Percentile
5.1%
Related for ALPINE:CVE-2023-29491