CVE-2021-39537

An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
gnuncurses
𝑥
≤ 6.2.1
applemac_os_x
10.12.6
applemacos
11.7
applemacos
13.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ncurses
bookworm
6.4-4
fixed
bullseye
6.2+20201114-2+deb11u2
fixed
sid
6.5-2
fixed
trixie
6.5-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ncurses
bionic
Fixed 6.1-1ubuntu1.18.04.1
released
focal
Fixed 6.2-0ubuntu2.1
released
hirsute
ignored
impish
not-affected
jammy
not-affected
kinetic
not-affected
lunar
not-affected
trusty
Fixed 5.9+20140118-1ubuntu1+esm2
released
xenial
Fixed 6.0+20160213-1ubuntu1+esm2
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libncurses5
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
libncurses5-32bit
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
libncurses6
suse enterprise desktop 15 SP2
6.1-5.9.1
fixed
suse enterprise desktop 15 SP3
6.1-5.9.1
fixed
suse enterprise desktop 15 SP4
6.1-5.9.1
fixed
suse enterprise desktop 15 SP5
6.1-5.9.1
fixed
suse enterprise desktop 15 SP6
6.1-5.9.1
fixed
suse enterprise desktop 15 SP7
6.1-5.9.1
fixed
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
libncurses6-32bit
suse enterprise desktop 15 SP2
6.1-5.9.1
fixed
suse enterprise desktop 15 SP3
6.1-5.9.1
fixed
suse enterprise desktop 15 SP4
6.1-5.9.1
fixed
suse enterprise desktop 15 SP5
6.1-5.9.1
fixed
suse enterprise desktop 15 SP6
6.1-5.9.1
fixed
suse enterprise desktop 15 SP7
6.1-5.9.1
fixed
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
ncurses-devel
suse enterprise desktop 15 SP2
6.1-5.9.1
fixed
suse enterprise desktop 15 SP3
6.1-5.9.1
fixed
suse enterprise desktop 15 SP4
6.1-5.9.1
fixed
suse enterprise desktop 15 SP5
6.1-5.9.1
fixed
suse enterprise desktop 15 SP6
6.1-5.9.1
fixed
suse enterprise desktop 15 SP7
6.1-5.9.1
fixed
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
ncurses-devel-32bit
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
ncurses-utils
suse enterprise desktop 15 SP2
6.1-5.9.1
fixed
suse enterprise desktop 15 SP3
6.1-5.9.1
fixed
suse enterprise desktop 15 SP4
6.1-5.9.1
fixed
suse enterprise desktop 15 SP5
6.1-5.9.1
fixed
suse enterprise desktop 15 SP6
6.1-5.9.1
fixed
suse enterprise desktop 15 SP7
6.1-5.9.1
fixed
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
ncurses5-devel
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
tack
suse enterprise desktop 15 SP2
6.1-5.9.1
fixed
suse enterprise desktop 15 SP3
6.1-5.9.1
fixed
suse enterprise desktop 15 SP4
6.1-5.9.1
fixed
suse enterprise desktop 15 SP5
6.1-5.9.1
fixed
suse enterprise desktop 15 SP6
6.1-5.9.1
fixed
suse enterprise desktop 15 SP7
6.1-5.9.1
fixed
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
terminfo
suse enterprise desktop 15 SP2
6.1-5.9.1
fixed
suse enterprise desktop 15 SP3
6.1-5.9.1
fixed
suse enterprise desktop 15 SP4
6.1-5.9.1
fixed
suse enterprise desktop 15 SP5
6.1-5.9.1
fixed
suse enterprise desktop 15 SP6
6.1-5.9.1
fixed
suse enterprise desktop 15 SP7
6.1-5.9.1
fixed
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
terminfo-base
suse enterprise desktop 15 SP2
6.1-5.9.1
fixed
suse enterprise desktop 15 SP3
6.1-5.9.1
fixed
suse enterprise desktop 15 SP4
6.1-5.9.1
fixed
suse enterprise desktop 15 SP5
6.1-5.9.1
fixed
suse enterprise desktop 15 SP6
6.1-5.9.1
fixed
suse enterprise desktop 15 SP7
6.1-5.9.1
fixed
suse enterprise sap 12 SP5
5.9-75.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 12 SP3
5.9-75.1
fixed
suse enterprise server 12 SP5
5.9-75.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
terminfo-iterm
suse enterprise desktop 15 SP2
6.1-5.9.1
fixed
suse enterprise desktop 15 SP3
6.1-5.9.1
fixed
suse enterprise desktop 15 SP4
6.1-5.9.1
fixed
suse enterprise desktop 15 SP5
6.1-5.9.1
fixed
suse enterprise desktop 15 SP6
6.1-5.9.1
fixed
suse enterprise desktop 15 SP7
6.1-5.9.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
terminfo-screen
suse enterprise desktop 15 SP2
6.1-5.9.1
fixed
suse enterprise desktop 15 SP3
6.1-5.9.1
fixed
suse enterprise desktop 15 SP4
6.1-5.9.1
fixed
suse enterprise desktop 15 SP5
6.1-5.9.1
fixed
suse enterprise desktop 15 SP6
6.1-5.9.1
fixed
suse enterprise desktop 15 SP7
6.1-5.9.1
fixed
suse enterprise sap 15 SP2
6.1-5.9.1
fixed
suse enterprise sap 15 SP3
6.1-5.9.1
fixed
suse enterprise sap 15 SP4
6.1-5.9.1
fixed
suse enterprise sap 15 SP5
6.1-5.9.1
fixed
suse enterprise sap 15 SP6
6.1-5.9.1
fixed
suse enterprise sap 15 SP7
6.1-5.9.1
fixed
suse enterprise server 15 SP2
6.1-5.9.1
fixed
suse enterprise server 15 SP3
6.1-5.9.1
fixed
suse enterprise server 15 SP4
6.1-5.9.1
fixed
suse enterprise server 15 SP5
6.1-5.9.1
fixed
suse enterprise server 15 SP6
6.1-5.9.1
fixed
suse enterprise server 15 SP7
6.1-5.9.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
ncurses
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.4
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-base
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.4
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-c++-libs
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.4
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-c++-libs-debuginfo
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-compat-libs
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.4
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-compat-libs-debuginfo
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-debuginfo
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.4
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-debugsource
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-devel
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.4
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-libs
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.4
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-libs-debuginfo
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-static
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.4
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
ncurses-term
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.4
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.3
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
ncurses
CBL-Mariner 1.0
0:6.2-5.cm1
fixed
CBL-Mariner 2.0
0:6.2-6.cm2
fixed