It was discovered that ncurses was incorrectly performing bounds checks when processing invalid hashcodes. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-17594)
It was discovered that ncurses was incorrectly handling end-of-string characters when processing terminfo and termcap files. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-17595)
It was discovered that ncurses was incorrectly handling end-of-string characters when converting between termcap and terminfo formats. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-39537)
It was discovered that ncurses was incorrectly performing bounds checks when dealing with corrupt terminfo data while reading a terminfo file. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-29458)
It was discovered that ncurses was parsing environment variables when running with setuid applications and not properly handling the processing of malformed data when doing so. A local attacker could possibly use this issue to cause a denial of service (application crash) or execute arbitrary code. (CVE-2023-29491)
{
"binaries": [
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "lib32ncurses5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "lib32ncurses5-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "lib32ncursesw5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "lib32ncursesw5-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "lib32tinfo-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "lib32tinfo5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "lib64ncurses5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "lib64ncurses5-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "lib64tinfo5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libncurses5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libncurses5-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libncursesw5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libncursesw5-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libtinfo-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libtinfo5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libx32ncurses5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libx32ncurses5-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libx32ncursesw5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libx32ncursesw5-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libx32tinfo-dev"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "libx32tinfo5"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "ncurses-base"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "ncurses-bin"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "ncurses-examples"
},
{
"binary_version": "5.9+20140118-1ubuntu1+esm3",
"binary_name": "ncurses-term"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
{
"binaries": [
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "lib32ncurses5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "lib32ncurses5-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "lib32ncursesw5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "lib32ncursesw5-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "lib32tinfo-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "lib32tinfo5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "lib64ncurses5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "lib64ncurses5-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "lib64tinfo5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libncurses5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libncurses5-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libncursesw5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libncursesw5-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libtinfo-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libtinfo5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libx32ncurses5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libx32ncurses5-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libx32ncursesw5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libx32ncursesw5-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libx32tinfo-dev"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "libx32tinfo5"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "ncurses-base"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "ncurses-bin"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "ncurses-examples"
},
{
"binary_version": "6.0+20160213-1ubuntu1+esm3",
"binary_name": "ncurses-term"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
{
"binaries": [
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "lib32ncurses5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "lib32ncurses5-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "lib32ncursesw5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "lib32ncursesw5-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "lib32tinfo-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "lib32tinfo5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "lib64ncurses5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "lib64ncurses5-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "lib64tinfo5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libncurses5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libncurses5-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libncursesw5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libncursesw5-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libtinfo-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libtinfo5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libx32ncurses5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libx32ncurses5-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libx32ncursesw5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libx32ncursesw5-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libx32tinfo-dev"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "libx32tinfo5"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "ncurses-base"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "ncurses-bin"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "ncurses-examples"
},
{
"binary_version": "6.1-1ubuntu1.18.04.1",
"binary_name": "ncurses-term"
}
],
"availability": "No subscription required"
}
{
"ecosystem": "Ubuntu:18.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-17594"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2019-17595"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2021-39537"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29458"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2023-29491"
}
]
}
{
"binaries": [
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "lib32ncurses-dev"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "lib32ncurses6"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "lib32ncursesw6"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "lib32tinfo6"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "lib64ncurses-dev"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "lib64ncurses6"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "lib64ncursesw6"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "lib64tinfo6"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libncurses-dev"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libncurses5"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libncurses5-dev"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libncurses6"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libncursesw5"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libncursesw5-dev"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libncursesw6"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libtinfo-dev"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libtinfo5"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "libtinfo6"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "ncurses-base"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "ncurses-bin"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "ncurses-examples"
},
{
"binary_version": "6.2-0ubuntu2.1",
"binary_name": "ncurses-term"
}
],
"availability": "No subscription required"
}
{
"ecosystem": "Ubuntu:20.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2021-39537"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29458"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2023-29491"
}
]
}
{
"binaries": [
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "lib32ncurses-dev"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "lib32ncurses6"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "lib32ncursesw6"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "lib32tinfo6"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "lib64ncurses-dev"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "lib64ncurses6"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "lib64ncursesw6"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "lib64tinfo6"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libncurses-dev"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libncurses5"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libncurses5-dev"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libncurses6"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libncursesw5"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libncursesw5-dev"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libncursesw6"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libtinfo-dev"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libtinfo5"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "libtinfo6"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "ncurses-base"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "ncurses-bin"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "ncurses-examples"
},
{
"binary_version": "6.3-2ubuntu0.1",
"binary_name": "ncurses-term"
}
],
"availability": "No subscription required"
}
{
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "negligible",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29458"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2023-29491"
}
]
}