CVE-2023-50495

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Affected Products (NVD)
VendorProductVersion
invisible-islandncurse
6.4-20230418
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ncurses
bookworm
no-dsa
bullseye
no-dsa
buster
no-dsa
sid
6.5-2
fixed
trixie
6.5-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ncurses
bionic
Fixed 6.1-1ubuntu1.18.04.1+esm2
released
focal
needed
jammy
needed
lunar
ignored
mantic
not-affected
noble
not-affected
oracular
not-affected
trusty
Fixed 5.9+20140118-1ubuntu1+esm5
released
xenial
Fixed 6.0+20160213-1ubuntu1+esm5
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libncurses5
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
libncurses5-32bit
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
libncurses6
suse enterprise desktop 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
libncurses6-32bit
suse enterprise desktop 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
ncurses-devel
suse enterprise desktop 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
ncurses-devel-32bit
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
ncurses-utils
suse enterprise desktop 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
ncurses5-devel
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
tack
suse enterprise desktop 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
terminfo
suse enterprise desktop 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
terminfo-base
suse enterprise desktop 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise sap 12 SP5
5.9-85.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 12 SP3
5.9-85.1
fixed
suse enterprise server 12 SP5
5.9-85.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
terminfo-iterm
suse enterprise desktop 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
terminfo-screen
suse enterprise desktop 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise desktop 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise sap 15 SP7
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP4
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP5
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP6
6.1-150000.5.20.1
fixed
suse enterprise server 15 SP7
6.1-150000.5.20.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
ncurses
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.7
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-base
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.7
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-c++-libs
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.7
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-c++-libs-debuginfo
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-compat-libs
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.7
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-compat-libs-debuginfo
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-debuginfo
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.7
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-debugsource
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-devel
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.7
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-libs
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.7
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-libs-debuginfo
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-static
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.7
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
ncurses-term
Amazon Linux 2
0:6.0-8.20170212.amzn2.1.7
fixed
Amazon Linux 2023
0:6.2-4.20200222.amzn2023.0.5
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
ncurses
CBL-Mariner 2.0
0:6.4-3.cm2
fixed
References
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html
https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html
https://security.netapp.com/advisory/ntap-20240119-0008/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html
https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html
https://security.netapp.com/advisory/ntap-20240119-0008/