{"id":"CVE-2023-50495","aliases":["AZL-32177","CLSA-2024-1716272110","DEBIAN-CVE-2023-50495","EUVD-2023-55278","GHSA-8p5h-3mcg-frjf","OESA-2023-1969","ROOT-OS-DEBIAN-11-CVE-2023-50495","ROOT-OS-DEBIAN-12-CVE-2023-50495","ROOT-OS-UBUNTU-2204-CVE-2023-50495","SUSE-SU-2023:4891-1","SUSE-SU-2023:4892-1","UBUNTU-CVE-2023-50495","USN-6684-1"],"status":"published","title":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component...","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01037,"percentile":0.64153,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-12-12T00:00:00Z","modified":"2026-10-26T18:02:59Z","fixes":[{"ecosystem":"Azure Linux:2","package":"ncurses","fixed_in":["6.4-3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-base","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-devel","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-libs","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-static","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ncurses-term","fixed_in":["5.9-14.20130511.el7_4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ncurses","fixed_in":["6.4+20230625-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ncurses","fixed_in":["6.4+20230625-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"ncurses","fixed_in":["6.2-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"ncurses","fixed_in":["6.2-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"ncurses","fixed_in":["6.2-5.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"ncurses","fixed_in":["6.3-13.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"ncurses","fixed_in":["6.3-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"ncurses","fixed_in":["6.3-13.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"ncurses","fixed_in":["6.2+20201114-2+deb11u2.root.io.3","6.2+20201114-2+deb11u2.root.io.1","6.2+20201114-2+deb11u2.root.io.2","6.2+20201114-2+deb11u2.root.io.4","6.2+20201114-2+deb11u2.root.io.6","6.2+20201114-2+deb11u2.aikido.7","6.2+20201114-2+deb11u2.root.io.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-ncurses","fixed_in":["6.2+20201114-2+deb11u2.root.io.3","6.2+20201114-2+deb11u2.root.io.1","6.2+20201114-2+deb11u2.root.io.2","6.2+20201114-2+deb11u2.root.io.4","6.2+20201114-2+deb11u2.root.io.6","6.2+20201114-2+deb11u2.aikido.7","6.2+20201114-2+deb11u2.root.io.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"ncurses","fixed_in":["6.4-4.root.io.3","6.4-4.root.io.1","6.4-4.root.io.2","6.4-4.root.io.4","6.4-4.root.io.5","6.4-4.root.io.6","6.4-4.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-ncurses","fixed_in":["6.4-4.root.io.3","6.4-4.root.io.1","6.4-4.root.io.2","6.4-4.root.io.4","6.4-4.root.io.5","6.4-4.root.io.6","6.4-4.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:22.04","package":"ncurses","fixed_in":["6.3-2ubuntu0.3.aikido.4"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:22.04","package":"rootio-ncurses","fixed_in":["6.3-2ubuntu0.3.aikido.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"ncurses","fixed_in":["6.1-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ncurses","fixed_in":["5.9-85.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ncurses","fixed_in":["5.9-85.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ncurses","fixed_in":["5.9-85.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","fixed_in":["5.9+20140118-1ubuntu1+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","fixed_in":["6.0+20160213-1ubuntu1+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ncurses","fixed_in":["6.1-1ubuntu1.18.04.1+esm2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ncurses-term","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4+20230603-1","6.4+20230625-1","6.4+20230625-2","6.4+20231007-1","6.4+20231016-1","6.4+20231118-1","6.4+20231121-1","6.4+20231209-1","6.4+20240113-1","6.4+20240414-1","6.4-4","6.5+20250125-1","6.5+20250125-2","6.5+20250216-1","6.5+20250216-2","6.5+20251115-1","6.5+20251115-2","6.5+20251122-1","6.5+20251123-1","6.5-1","6.5-2","6.6+20251231-1","6.6+20260608-1","6.6+20260608-2"]},{"source":"osv","ecosystem":"Debian:13","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4+20230625-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4+20230625-1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-5.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-13.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-13.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2+20201114-2+deb11u2.root.io.3"},{"fixed":"6.2+20201114-2+deb11u2.root.io.1"},{"fixed":"6.2+20201114-2+deb11u2.root.io.2"},{"fixed":"6.2+20201114-2+deb11u2.root.io.4"},{"fixed":"6.2+20201114-2+deb11u2.root.io.6"},{"fixed":"6.2+20201114-2+deb11u2.aikido.7"},{"fixed":"6.2+20201114-2+deb11u2.root.io.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2+20201114-2+deb11u2.root.io.3"},{"fixed":"6.2+20201114-2+deb11u2.root.io.1"},{"fixed":"6.2+20201114-2+deb11u2.root.io.2"},{"fixed":"6.2+20201114-2+deb11u2.root.io.4"},{"fixed":"6.2+20201114-2+deb11u2.root.io.6"},{"fixed":"6.2+20201114-2+deb11u2.aikido.7"},{"fixed":"6.2+20201114-2+deb11u2.root.io.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-4.root.io.3"},{"fixed":"6.4-4.root.io.1"},{"fixed":"6.4-4.root.io.2"},{"fixed":"6.4-4.root.io.4"},{"fixed":"6.4-4.root.io.5"},{"fixed":"6.4-4.root.io.6"},{"fixed":"6.4-4.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-4.root.io.3"},{"fixed":"6.4-4.root.io.1"},{"fixed":"6.4-4.root.io.2"},{"fixed":"6.4-4.root.io.4"},{"fixed":"6.4-4.root.io.5"},{"fixed":"6.4-4.root.io.6"},{"fixed":"6.4-4.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:22.04","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-2ubuntu0.3.aikido.4"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:22.04","package":"rootio-ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3-2ubuntu0.3.aikido.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-85.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-85.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-85.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm5"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1","5.9+20140118-1ubuntu1+esm2","5.9+20140118-1ubuntu1+esm3","5.9+20140118-1ubuntu1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm5"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1","6.0+20160213-1ubuntu1+esm2","6.0+20160213-1ubuntu1+esm3","6.0+20160213-1ubuntu1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+esm2"}]}],"versions":["6.0+20160625-1ubuntu1","6.0+20171125-1ubuntu1","6.1-1ubuntu1","6.1-1ubuntu1.18.04","6.1-1ubuntu1.18.04.1","6.1-1ubuntu1.18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1+20190803-1ubuntu1","6.1+20191019-1ubuntu1","6.2-0ubuntu2","6.2-0ubuntu2.1","6.2-0ubuntu2.1+esm1","6.2-0ubuntu2.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2+20201114-2build1","6.2+20201114-2build2","6.3-1","6.3-2","6.3-2ubuntu0.1","6.3-2ubuntu0.2","6.3-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm5"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1","5.9+20140118-1ubuntu1+esm2","5.9+20140118-1ubuntu1+esm3","5.9+20140118-1ubuntu1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm5"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1","6.0+20160213-1ubuntu1+esm2","6.0+20160213-1ubuntu1+esm3","6.0+20160213-1ubuntu1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04.1+esm2"}]}],"versions":["6.0+20160625-1ubuntu1","6.0+20171125-1ubuntu1","6.1-1ubuntu1","6.1-1ubuntu1.18.04","6.1-1ubuntu1.18.04.1","6.1-1ubuntu1.18.04.1+esm1"]}],"products":[{"vendor":"invisible-island","product":"ncurse"},{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"}],"references":[{"url":"https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","tags":["x_transferred","Mailing List","Patch","fix","report"]},{"url":"https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","tags":["x_transferred","Mailing List","Patch","fix","report"]},{"url":"https://security.netapp.com/advisory/ntap-20240119-0008/","tags":["x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT"},{"url":"https://security.netapp.com/advisory/ntap-20240119-0008"},{"url":"https://github.com/advisories/GHSA-8p5h-3mcg-frjf"},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1716272110.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-50495","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1969","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234891-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201384","tags":["report"]},{"url":"https://bugzilla.suse.com/1218014","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50495","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234892-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-50495","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6684-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50495","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().","status":"published","published":"2023-12-12T00:00:00Z","modified":"2026-10-15T00:08:55.071Z","updated_at":"2026-11-02T14:35:34.923818Z"}],"euvd":[{"id":"EUVD-2023-55278","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().","status":"published","published":"2023-12-12T00:00:00Z","modified":"2026-10-15T00:08:55Z","updated_at":"2026-11-02T17:27:11.209168Z"}],"ghsa":[{"id":"GHSA-8p5h-3mcg-frjf","title":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component...","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().","status":"published","published":"2023-12-12T15:30:59Z","modified":"2026-10-15T03:33:11Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:13:30.561319Z"}],"nvd":[{"id":"CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().","status":"published","published":"2023-12-12T15:15:07.867Z","modified":"2026-10-15T01:17:11.997Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:08:54.010507Z"}],"osv":[{"id":"AZL-32177","title":"CVE-2023-50495 affecting package ncurses for versions less than 6.4-3","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().","status":"published","published":"2023-12-12T15:15:07Z","modified":"2026-04-21T04:26:41.620247Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().","status":"published","published":"2023-12-12T15:15:07.867Z","modified":"2026-03-14T12:24:06.270495Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().","status":"published","published":"2023-12-12T15:15:07.867Z","modified":"2026-10-26T18:02:59.424780002Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"OESA-2023-1969","title":"ncurses security update","description":"The ncurses (new curses) library is a free software emulation of  curses in System V Release 4.0 (SVr4), and more. It uses terminfo  format, supports pads and color and multiple highlights and forms  characters and function-key mapping, and has all the other SVr4-curses  enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.\r\n\r\nSecurity Fix(es):\r\n\r\nNCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().(CVE-2023-50495)","status":"published","published":"2023-12-22T11:06:25Z","modified":"2026-08-18T01:18:07.846898254Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2023-50495","title":"CVE-2023-50495 in ncurses - Patched by Root","description":"Root has patched CVE-2023-50495 in the ncurses package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-23T08:23:52Z","modified":"2026-08-23T10:16:37.661208516Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:28.80888Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-50495","title":"CVE-2023-50495 in ncurses - Patched by Root","description":"Root has patched CVE-2023-50495 in the ncurses package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T12:20:35Z","modified":"2026-08-26T01:12:43.664979579Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"ROOT-OS-UBUNTU-2204-CVE-2023-50495","title":"CVE-2023-50495 in ncurses - Patched by Root","description":"Root has patched CVE-2023-50495 in the ncurses package for Root:Ubuntu:22.04. Multiple fixed versions available.","status":"published","published":"2026-10-09T09:29:33Z","modified":"2026-10-09T10:17:34.969468663Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:33.943322Z"},{"id":"UBUNTU-CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().","status":"published","published":"2023-12-12T15:15:00Z","modified":"2026-09-01T21:00:10.95114581Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"CLSA-2024-1716272110","title":"ncurses: Fix of CVE-2023-50495","description":"- CVE-2023-50495: check return value of _nc_save_str() (from upstream patch 20230424),\n  add validity checks in _nc_parse_entry() (from upstream patch 20170826)","status":"published","published":"2024-05-21T09:53:22Z","modified":"2026-06-01T00:33:04.693884525Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"SUSE-SU-2023:4891-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issues:\n\n- CVE-2023-50495: Fixed a segmentation fault via _nc_wrap_entry() (bsc#1218014)\n- Modify reset command to avoid altering clocal if the terminal uses a modem (bsc#1201384)\n","status":"published","published":"2023-12-18T15:32:17Z","modified":"2026-02-04T04:27:11.101984Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4892-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issues:\n\n- CVE-2023-50495: Fixed a segmentation fault via _nc_wrap_entry() (bsc#1218014)\n","status":"published","published":"2023-12-18T15:33:34Z","modified":"2026-02-04T03:36:19.234775Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-6684-1","title":"ncurses vulnerability","description":"It was discovered that ncurses incorrectly handled certain function return\nvalues, possibly leading to segmentation fault. A local attacker could possibly\nuse this to cause a denial of service (system crash).\n","status":"published","published":"2024-03-07T20:52:17Z","modified":"2026-06-29T13:51:02.187133581Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}