{"id":"CVE-2023-29491","aliases":["ALPINE-CVE-2023-29491","ALSA-2023:5249","ALSA-2023:6698","AZL-26241","BELL-CVE-2023-29491","CLSA-2024-1710789286","CLSA-2025-1739387560","CLSA-2026-1792806631","DEBIAN-CVE-2023-29491","DLA-3682-1","EUVD-2023-33058","GHSA-vh2x-5rx6-qqhv","JLSEC-2026-453","MGASA-2024-0065","OESA-2023-1426","RHSA-2023:5249","RHSA-2023:6698","RHSA-2023:7361","RHSA-2024:0416","SUSE-SU-2023:2111-1","SUSE-SU-2023:2112-1","UBUNTU-CVE-2023-29491","USN-6099-1"],"status":"published","title":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger...","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00979,"percentile":0.62447,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-04-14T00:00:00Z","modified":"2026-10-29T11:31:34Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"ncurses","fixed_in":["6.3_p20211120-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"ncurses","fixed_in":["6.3_p20220521-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ncurses","fixed_in":["6.3_p20221119-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ncurses","fixed_in":["6.4_p20230424-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ncurses","fixed_in":["6.4_p20230424-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ncurses","fixed_in":["6.4_p20230424-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ncurses","fixed_in":["6.4_p20230424-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ncurses","fixed_in":["6.4_p20230424-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ncurses","fixed_in":["6.4_p20230424-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ncurses","fixed_in":["6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ncurses-base","fixed_in":["6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ncurses-c++-libs","fixed_in":["6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ncurses-compat-libs","fixed_in":["6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ncurses-devel","fixed_in":["6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ncurses-libs","fixed_in":["6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ncurses-term","fixed_in":["6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"ncurses","fixed_in":["6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"ncurses-base","fixed_in":["6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"ncurses-c++-libs","fixed_in":["6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"ncurses-devel","fixed_in":["6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"ncurses-libs","fixed_in":["6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"ncurses-term","fixed_in":["6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"ncurses","fixed_in":["6.4-1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses","fixed_in":["6.2-8.20210508.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-base","fixed_in":["6.2-8.20210508.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-c++-libs","fixed_in":["6.2-8.20210508.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-compat-libs","fixed_in":["6.2-8.20210508.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-devel","fixed_in":["6.2-8.20210508.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-libs","fixed_in":["6.2-8.20210508.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-static","fixed_in":["6.2-8.20210508.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-term","fixed_in":["6.2-8.20210508.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ncurses","fixed_in":["6.4-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ncurses","fixed_in":["6.4-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ncurses","fixed_in":["6.4-3"],"sources":["osv"]},{"ecosystem":"Julia","package":"Ncurses_jll","fixed_in":["6.4.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"ncurses","fixed_in":["6.3-20221203.2.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"ncurses","fixed_in":["6.2-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"ncurses","fixed_in":["6.2-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"ncurses","fixed_in":["6.3-12.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"ncurses","fixed_in":["6.3-8.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"ncurses","fixed_in":["6.3-12.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-base","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-c++-libs","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-c++-libs-debuginfo","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-compat-libs","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-compat-libs-debuginfo","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-debuginfo","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-debugsource","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-devel","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-libs","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-libs-debuginfo","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-term","fixed_in":["0:6.1-9.20180224.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-c++-libs","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-c++-libs-debuginfo","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-compat-libs-debuginfo","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-debuginfo","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-debugsource","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-devel","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-libs-debuginfo","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-term","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-base","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-c++-libs-debuginfo","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-compat-libs-debuginfo","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-debuginfo","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-debugsource","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-libs","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-libs-debuginfo","fixed_in":["0:6.2-10.20210508.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-c++-libs","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-c++-libs-debuginfo","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-compat-libs-debuginfo","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-debuginfo","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-debugsource","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-devel","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-libs-debuginfo","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-term","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-base","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-c++-libs-debuginfo","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-compat-libs-debuginfo","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-debuginfo","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-debugsource","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-libs","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-libs-debuginfo","fixed_in":["0:6.2-8.20210508.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-base","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-c++-libs","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-c++-libs-debuginfo","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-compat-libs","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-compat-libs-debuginfo","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-debuginfo","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-debugsource","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-devel","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-libs","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-libs-debuginfo","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-term","fixed_in":["0:6.1-9.20180224.el8_6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"ncurses","fixed_in":["6.1-150000.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ncurses","fixed_in":["5.9-81.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ncurses","fixed_in":["5.9-81.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ncurses","fixed_in":["5.9-81.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","fixed_in":["5.9+20140118-1ubuntu1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","fixed_in":["6.0+20160213-1ubuntu1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ncurses","fixed_in":["6.1-1ubuntu1.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ncurses","fixed_in":["6.2-0ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ncurses","fixed_in":["6.3-2ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3_p20211120-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3_p20220521-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3_p20221119-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4_p20230424-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4_p20230424-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4_p20230424-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4_p20230424-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4_p20230424-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4_p20230424-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ncurses-compat-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-8.20210508.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-8.20210508.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-8.20210508.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-compat-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-8.20210508.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-8.20210508.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-8.20210508.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-8.20210508.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-8.20210508.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-4.20090207.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-4.20090207.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-4.20090207.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-4.20090207.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"ncurses-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-4.20090207.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-4.20090207.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-3"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20181013-2+deb10u5"}]}],"versions":["6.1+20181013-2","6.1+20181013-2+deb10u1","6.1+20181013-2+deb10u2","6.1+20181013-2+deb10u3","6.1+20181013-2+deb10u4"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"Ncurses_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.4.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-20221203.2.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-12.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-8.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-12.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-c++-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-compat-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-compat-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-c++-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-compat-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-c++-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-compat-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ncurses-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-10.20210508.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-c++-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-compat-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-c++-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-compat-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"ncurses-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2-8.20210508.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-c++-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-c++-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-compat-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-compat-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1-9.20180224.el8_6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-81.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-81.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-81.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm3"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1","5.9+20140118-1ubuntu1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm3"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1","6.0+20160213-1ubuntu1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1"}]}],"versions":["6.0+20160625-1ubuntu1","6.0+20171125-1ubuntu1","6.1-1ubuntu1","6.1-1ubuntu1.18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-0ubuntu2.1"}]}],"versions":["6.1+20190803-1ubuntu1","6.1+20191019-1ubuntu1","6.2-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-2ubuntu0.1"}]}],"versions":["6.2+20201114-2build1","6.2+20201114-2build2","6.3-1","6.3-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm3"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1","5.9+20140118-1ubuntu1+esm2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm3"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1","6.0+20160213-1ubuntu1+esm2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1"}]}],"versions":["6.0+20160625-1ubuntu1","6.0+20171125-1ubuntu1","6.1-1ubuntu1","6.1-1ubuntu1.18.04"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-0ubuntu2.1"}]}],"versions":["6.1+20190803-1ubuntu1","6.1+20191019-1ubuntu1","6.2-0ubuntu2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-2ubuntu0.1"}]}],"versions":["6.2+20201114-2build1","6.2+20201114-2build2","6.3-1","6.3-2"],"bundled":5}],"products":[{"vendor":"invisible-island","product":"ncurses"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://www.openwall.com/lists/oss-security/2023/04/13/4","tags":["x_transferred","Mailing List","Patch","web","report"]},{"url":"http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56","tags":["x_transferred","web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/04/12/5","tags":["x_transferred","Mailing List","web","report"]},{"url":"http://www.openwall.com/lists/oss-security/2023/04/19/10","tags":["mailing-list","x_transferred","Mailing List","Patch","Third Party Advisory","article","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/04/19/11","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","article","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230517-0009/","tags":["x_transferred","advisory","web"]},{"url":"https://support.apple.com/kb/HT213843","tags":["x_transferred","web"]},{"url":"https://support.apple.com/kb/HT213844","tags":["x_transferred","web"]},{"url":"https://support.apple.com/kb/HT213845","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html","tags":["mailing-list","x_transferred","article","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-202008.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29491","tags":["web","advisory"]},{"url":"http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT"},{"url":"https://security.netapp.com/advisory/ntap-20230517-0009"},{"url":"https://github.com/advisories/GHSA-vh2x-5rx6-qqhv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-29491","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5249","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29491","tags":["report"]},{"url":"https://bugzilla.redhat.com/2191704","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-5249.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6698","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6698.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-29491","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1710789286.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1739387560.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1792806631.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39537","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29491.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-29491","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0065.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31792","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-May/014766.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-6099-1","tags":["advisory"]},{"url":"https://lwn.net/Articles/952268/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1426","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2191704","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5249.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29491","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211666","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6698.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7361","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7361.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0416","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0416.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232111-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210434","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29491","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232112-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-29491","tags":["report"]},{"url":"https://invisible-island.net/ncurses/NEWS.html#index-t20230408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-39537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-29458","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2023-04-14T00:00:00Z","modified":"2026-10-14T23:03:54.437Z","updated_at":"2026-11-02T14:35:28.643185Z"}],"euvd":[{"id":"EUVD-2023-33058","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2023-04-14T00:00:00Z","modified":"2026-10-14T23:03:54Z","updated_at":"2026-11-02T17:27:11.209168Z"}],"ghsa":[{"id":"GHSA-vh2x-5rx6-qqhv","title":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger...","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2023-04-14T03:30:29Z","modified":"2026-10-15T00:31:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:13:30.561319Z"}],"nvd":[{"id":"CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2023-04-14T01:15:08.57Z","modified":"2026-10-14T23:17:18.18Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:55.652109Z"}],"osv":[{"id":"ALPINE-CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2023-04-14T01:15:08.57Z","modified":"2026-10-26T17:17:58.621355035Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-26241","title":"CVE-2023-29491 affecting package ncurses for versions less than 6.4-1","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2023-04-14T01:15:08Z","modified":"2026-04-21T04:23:34.000609Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-29491","title":"CVE-2023-29491 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:56.839165Z","modified":"2026-01-26T09:48:49.790435Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"DEBIAN-CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2023-04-14T01:15:08.57Z","modified":"2026-10-26T18:00:50.695234593Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"JLSEC-2026-453","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in `$HOME/.terminfo` or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2026-05-05T15:51:30.603Z","modified":"2026-07-25T18:24:29.4356714Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2023-1426","title":"ncurses security update","description":"The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.\n\nSecurity Fix(es):\n\nncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.(CVE-2023-29491)","status":"published","published":"2023-07-15T11:05:53Z","modified":"2026-08-18T01:16:42.72161096Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:5249","title":"Red Hat Security Advisory: ncurses security update","status":"published","published":"2024-09-16T12:49:50Z","modified":"2026-06-03T10:03:13Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6698","title":"Red Hat Security Advisory: ncurses security and bug fix update","status":"published","published":"2024-09-16T12:49:59Z","modified":"2026-06-26T12:22:21.626003394Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7361","title":"Red Hat Security Advisory: ncurses security update","status":"published","published":"2024-09-16T12:50:08Z","modified":"2026-06-26T12:22:21.627629061Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0416","title":"Red Hat Security Advisory: ncurses security update","status":"published","published":"2024-09-16T12:50:18Z","modified":"2026-06-03T10:05:52Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2023-04-14T01:15:00Z","modified":"2026-04-22T14:05:20.354673Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2023:5249","title":"Moderate: ncurses security update","description":"The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.\n\nSecurity Fix(es):\n\n* ncurses: Local users can trigger security-relevant memory corruption via malformed data (CVE-2023-29491)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-19T00:00:00Z","modified":"2026-10-29T11:02:26.935803971Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6698","title":"Moderate: ncurses security and bug fix update","description":"The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.\n\nSecurity Fix(es):\n\n* ncurses: Local users can trigger security-relevant memory corruption via malformed data (CVE-2023-29491)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:34.631262676Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2024-1710789286","title":"ncurses: Fix of 2 CVEs","description":"- CVE-2023-29491.patch: Mitigate vulnerability by building the packages with\n  modified --disable-root-environ option which now limits usage of environment\n  for setuid/setgid programs only\n- CVE-2021-39537.patch: Add a check for end-of-string in cvtchar to handle a\n  malformed string in infotocap","status":"published","published":"2024-03-18T19:14:50Z","modified":"2026-10-21T10:47:50.682823382Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2025-1739387560","title":"ncurses: Fix of CVE-2023-29491","description":"- CVE-2023-29491: fix triggering memory corruption via malformed terminfo\n  database file when used by a setuid application","status":"published","published":"2025-02-12T19:12:45Z","modified":"2026-06-01T00:30:27.323207317Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2026-1792806631","title":"ncurses: Fix of 2 CVEs","description":"- CVE-2021-39537: fix heap buffer overflow in _nc_captoinfo() with a crafted termcap entry\n- CVE-2023-29491: ignore terminfo/termcap environment variables in setuid/setgid\n  programs (--disable-root-environ)","status":"published","published":"2026-10-24T01:50:43Z","modified":"2026-10-26T09:31:55.310919711Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.","status":"published","published":"2023-04-14T00:00:00Z","modified":"2026-07-15T01:49:14.877618189Z","updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DLA-3682-1","title":"ncurses - security update","status":"published","published":"2023-12-03T00:00:00Z","modified":"2026-03-09T01:18:42.667623Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2024-0065","title":"Updated ncurses packages fix security vulnerability","description":"The updated packages fix a security vulnerability:\nLocal users can trigger security-relevant memory corruption via\nmalformed data. (CVE-2023-29491)\n","status":"published","published":"2024-03-15T22:51:55Z","modified":"2026-04-16T04:43:34.497691648Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"SUSE-SU-2023:2111-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issues:\n\n- CVE-2023-29491: Fixed memory corruption issues when processing malformed terminfo data (bsc#1210434).\n","status":"published","published":"2023-05-05T12:34:17Z","modified":"2026-02-04T03:27:48.740076Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2112-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issues:\n\n- CVE-2023-29491: Fixed memory corruption issues when processing malformed terminfo data (bsc#1210434).\n","status":"published","published":"2023-05-05T12:34:51Z","modified":"2026-02-04T03:19:35.297476Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-6099-1","title":"ncurses vulnerabilities","description":"It was discovered that ncurses was incorrectly performing bounds\nchecks when processing invalid hashcodes. An attacker could possibly\nuse this issue to cause a denial of service or to expose sensitive\ninformation. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2019-17594)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when processing terminfo and termcap files.\nAn attacker could possibly use this issue to cause a denial of\nservice or to expose sensitive information. This issue only affected\nUbuntu 18.04 LTS. (CVE-2019-17595)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when converting between termcap and\nterminfo formats. An attacker could possibly use this issue to cause\na denial of service or execute arbitrary code. This issue only\naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-39537)\n\nIt was discovered that ncurses was incorrectly performing bounds\nchecks when dealing with corrupt terminfo data while reading a\nterminfo file. An attacker could possibly use this issue to cause a\ndenial of service or to expose sensitive information. This issue only\naffected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2022-29458)\n\nIt was discovered that ncurses was parsing environment variables when\nrunning with setuid applications and not properly handling the\nprocessing of malformed data when doing so. A local attacker could\npossibly use this issue to cause a denial of service (application\ncrash) or execute arbitrary code. (CVE-2023-29491)\n","status":"published","published":"2023-05-23T11:56:42Z","modified":"2026-06-29T13:50:52.110010552Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}