Every CVE Search/ Get API key

CVE-2023-45918

ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.

5.5 MediumFix availableRejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

What each source reports

GitHub Advisories Score usedGHSA-pfv6-3f5p-j5c6 5.5

ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.

ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.

Record
GHSA-pfv6-3f5p-j5c6
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Record
CVE-2023-45918
Updated
2026-11-02
EUVDEUVD-2023-50181 No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Record
EUVD-2023-50181
Updated
2026-11-03
NVD No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Record
CVE-2023-45918
Updated
2026-11-02
OSVBELL-CVE-2023-45918 5.5

CVE-2023-45918 does not affect BellSoft software

Record
BELL-CVE-2023-45918
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1125 3.5

ncurses security update

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.

Security Fix(es):

A vulnerability was found in GNU ncurses 6.4-20230610. It has been rated as problematic. This issue affects the function tgetstr. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2023-45918)

Record
OESA-2024-1125
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 5 moreShow less
OSV No score

ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c. NOTE: Multiple third parties have disputed this indicating upstream does not regard it as a security issue.

Record
CVE-2023-45918
Updated
2026-11-02
OSVSUSE-SU-2024:1132-1 No score

Security update for ncurses

This update for ncurses fixes the following issues:

  • CVE-2023-45918: Fixed NULL pointer dereference via corrupted xterm-256color file (bsc#1220061).
Record
SUSE-SU-2024:1132-1
Updated
2026-11-02
OSVSUSE-SU-2024:1133-1 No score

Security update for ncurses

This update for ncurses fixes the following issues:

  • CVE-2023-45918: Fixed NULL pointer dereference via corrupted xterm-256color file (bsc#1220061).
Record
SUSE-SU-2024:1133-1
Updated
2026-11-02
OSVSUSE-SU-2024:1133-2 No score

Security update for ncurses

This update for ncurses fixes the following issues:

  • CVE-2023-45918: Fixed NULL pointer dereference via corrupted xterm-256color file (bsc#1220061).
Record
SUSE-SU-2024:1133-2
Updated
2026-11-02
OSVUBUNTU-CVE-2023-45918 No score

ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.

Record
UBUNTU-CVE-2023-45918
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
ncurses
openEuler:20.03-LTS-SP1
 before 6.2-6.oe1
6.2-6.oe1
ncurses
openEuler:20.03-LTS-SP4
 before 6.2-6.oe2003sp4
6.2-6.oe2003sp4
ncurses
openEuler:22.03-LTS
 before 6.3-14.oe2203sp3
6.3-14.oe2203sp3
ncurses
openEuler:22.03-LTS-SP1
 before 6.3-10.oe2203sp1
6.3-10.oe2203sp1
ncurses
openEuler:22.03-LTS-SP2
 before 6.3-14.oe2203sp2
6.3-14.oe2203sp2
ncurses
openEuler:22.03-LTS-SP3
 before 6.3-14.oe2203sp3
6.3-14.oe2203sp3
ncurses
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 5.9-88.1
5.9-88.1
ncurses
SUSE:Linux Enterprise Server 12 SP5
 before 5.9-88.1
5.9-88.1
ncurses
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 5.9-88.1
5.9-88.1
ncurses
SUSE:Linux Enterprise Micro 5.3
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
Show 10 moreShow less
Affected packages
PackageAffectedFixed
ncurses
SUSE:Linux Enterprise Micro 5.4
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
ncurses
SUSE:Linux Enterprise Micro 5.5
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
ncurses
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
ncurses
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
ncurses
SUSE:Linux Enterprise Module for Legacy 15 SP5
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
ncurses
SUSE:Linux Enterprise Micro 5.1
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
ncurses
SUSE:Linux Enterprise Micro 5.2
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
ncurses
openSUSE:Leap Micro 5.3
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
ncurses
openSUSE:Leap Micro 5.4
 before 6.1-150000.5.24.1
6.1-150000.5.24.1
ncurses
openSUSE:Leap 15.5
 before 6.1-150000.5.24.1
6.1-150000.5.24.1

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-45918 has been rejected by its source and should not be treated as a live vulnerability, published February 2, 2024. Fixed in ncurses 6.2-6.oe1.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open