{"id":"CVE-2018-10754","aliases":["ALPINE-CVE-2018-10754","EUVD-2018-2824","MGASA-2018-0299","SUSE-SU-2019:3094-1","UBUNTU-CVE-2018-10754"],"status":"rejected","title":"Updated ncurses packages fix security vulnerability","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-05-05T02:00:00Z","modified":"2026-10-23T17:17:55Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"ncurses","fixed_in":["6.0_p20171125-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"ncurses","fixed_in":["6.0_p20171125-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"ncurses","fixed_in":["6.0_p20171125-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"ncurses","fixed_in":["6.1_p20180414-r0"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"ncurses","fixed_in":["6.0-8.3.mga6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0_p20171125-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0_p20171125-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0_p20171125-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1_p20180414-r0"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0-8.3.mga6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-69.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-69.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-69.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-69.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-69.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-69.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-69.1"}]}],"bundled":3}],"references":[{"url":"https://security.alpinelinux.org/vuln/CVE-2018-10754","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0299.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576119","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193094-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1131830","tags":["report"]},{"url":"https://bugzilla.suse.com/1134550","tags":["report"]},{"url":"https://bugzilla.suse.com/1154036","tags":["report"]},{"url":"https://bugzilla.suse.com/1154037","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17595","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-10754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566575","tags":["report"]},{"url":"https://invisible-island.net/ncurses/NEWS.html#t20180414","tags":["report"]},{"url":"https://drive.google.com/drive/u/2/folders/1klyBjovfKXhLqBhbWX1n9dwqD-qne5f2","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10754","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-10754","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"rejected","published":"2018-05-05T02:00:00Z","modified":"2019-08-30T17:27:07Z","updated_at":"2026-11-02T14:35:01.619448Z"}],"euvd":[{"id":"EUVD-2018-2824","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2018-05-05T02:00:00Z","modified":"2019-08-30T17:27:07Z","updated_at":"2026-11-03T03:51:29.418182Z"}],"nvd":[{"id":"CVE-2018-10754","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"rejected","published":"2018-05-05T02:29:00.327Z","modified":"2023-11-07T02:51:32.133Z","updated_at":"2026-11-02T14:04:26.098615Z"}],"osv":[{"id":"ALPINE-CVE-2018-10754","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2018-05-05T02:29:00.327Z","modified":"2026-10-23T17:17:55.171467709Z","updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-10754","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none","status":"published","published":"2018-05-05T02:29:00Z","modified":"2026-04-16T06:17:20.258367866Z","updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"MGASA-2018-0299","title":"Updated ncurses packages fix security vulnerability","description":"A flaw was found in ncurses before 6.1.20180414 where a NULL Pointer\nDereference in the _nc_parse_entry function of tinfo/parse_entry.c could\nlead to a remote denial of service if the terminfo library code is used to\nprocess untrusted terminfo data in which a use-name is invalid syntax\n(CVE-2018-10754).\n","status":"published","published":"2018-07-01T17:17:14Z","modified":"2026-04-16T06:23:00.861913389Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"SUSE-SU-2019:3094-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-10754: Fixed a denial of service caused by a NULL Pointer Dereference in the _nc_parse_entry() (bsc#1131830).\n- CVE-2019-17594: Fixed a heap-based buffer over-read in _nc_find_entry function in tinfo/comp_hash.c (bsc#1154036).\n- CVE-2019-17595: Fixed a heap-based buffer over-read in fmt_entry function in tinfo/comp_hash.c (bsc#1154037).\n\nBug fixes:\n\n- Fixed ppc64le build configuration (bsc#1134550).\n","status":"published","published":"2019-11-28T15:48:05Z","modified":"2025-05-02T04:07:22.973512Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"UBUNTU-CVE-2018-10754","description":"** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.","status":"withdrawn","published":"2018-05-05T02:29:00Z","modified":"2025-07-08T14:32:17.775978Z","updated_at":"2026-11-02T15:54:16.544091Z"}]}}