遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2021:4426 公告中提及的多個弱點影響。

  - ncurses：tinfo/comp_hash.c 的 _nc_find_entry 函式中的堆積型緩衝區溢位弱點 (CVE-2019-17594)

  - ncurses：tinfo/comp_hash.c 的 fmt_entry 函式中的堆積型緩衝區溢位弱點 (CVE-2019-17595)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Oracle Linux 8 主機中安裝的套件受到 ELSA-2021-4426 公告中提及的多個弱點影響。

  - 在 6.1-20191012 之前的 ncurses 的 terminfo 程式庫中，tinfo/comp_hash.c 的 _nc_find_entry 函式存在一個堆積型緩衝區過度讀取問題。(CVE-2019-17594)

  - 在 6.1-20191012 之前的 ncurses 的 terminfo 程式庫中，tinfo/comp_hash.c 的 fmt_entry 函式存在一個堆積型緩衝區過度讀取問題。(CVE-2019-17595)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4426 advisory.

  - There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo     library in ncurses before 6.1-20191012. (CVE-2019-17594)

  - There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo     library in ncurses before 6.1-20191012. (CVE-2019-17595)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for ncurses fixes the following issues :

Security issues fixed :

CVE-2019-17594: Fixed a heap-based buffer over-read in the
_nc_find_entry function (bsc#1154036).

CVE-2019-17595: Fixed a heap-based buffer over-read in the fmt_entry function (bsc#1154037).

Non-security issue fixed: Removed screen.xterm from terminfo database (bsc#1103320).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6099-1 advisory.

    It was discovered that ncurses was incorrectly performing bounds checks when processing invalid hashcodes.
    An attacker could possibly use this issue to cause a denial of service or to expose sensitive information.
    This issue only affected Ubuntu 18.04 LTS. (CVE-2019-17594)

    It was discovered that ncurses was incorrectly handling end-of-string characters when processing terminfo     and termcap files. An attacker could possibly use this issue to cause a denial of service or to expose     sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-17595)

    It was discovered that ncurses was incorrectly handling end-of-string characters when converting between     termcap and terminfo formats. An attacker could possibly use this issue to cause a denial of service or     execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-39537)

    It was discovered that ncurses was incorrectly performing bounds checks when dealing with corrupt terminfo     data while reading a terminfo file. An attacker could possibly use this issue to cause a denial of service     or to expose sensitive information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu     22.04 LTS. (CVE-2022-29458)

    It was discovered that ncurses was parsing environment variables when running with setuid applications and     not properly handling the processing of malformed data when doing so. A local attacker could possibly use     this issue to cause a denial of service (application crash) or execute arbitrary code. (CVE-2023-29491)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - There is an infinite loop in the next_char function in     comp_scan.c in ncurses 6.0, related to libtic. A     crafted input will lead to a remote denial of service     attack.(CVE-2017-13728)

  - There is an illegal address access in the _nc_save_str     function in alloc_entry.c in ncurses 6.0. It will lead     to a remote denial of service attack.(CVE-2017-13729)

  - There is an illegal address access in the function
    _nc_read_entry_source() in progs/tic.c in ncurses 6.0     that might lead to a remote denial of service     attack.(CVE-2017-13730)

  - There is an illegal address access in the function     postprocess_termcap() in parse_entry.c in ncurses 6.0     that will lead to a remote denial of service     attack.(CVE-2017-13731)

  - There is an illegal address access in the function     dump_uses() in progs/dump_entry.c in ncurses 6.0 that     might lead to a remote denial of service     attack.(CVE-2017-13732)

  - There is an illegal address access in the fmt_entry     function in progs/dump_entry.c in ncurses 6.0 that     might lead to a remote denial of service     attack.(CVE-2017-13733)

  - There is an illegal address access in the
    _nc_safe_strcat function in strings.c in ncurses 6.0     that will lead to a remote denial of service     attack.(CVE-2017-13734)

  - There is a heap-based buffer over-read in the
    _nc_find_entry function in tinfo/comp_hash.c in the     terminfo library in ncurses before     6.1-20191012.(CVE-2019-17594)

  - There is a heap-based buffer over-read in the fmt_entry     function in tinfo/comp_hash.c in the terminfo library     in ncurses before 6.1-20191012.(CVE-2019-17595)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5477-1 advisory.

    Hosein Askari discovered that ncurses was incorrectly performing memory management operations when dealing     with long filenames while writing structures into the file system. An attacker could possibly use this     issue to cause a denial of service or execute arbitrary code. (CVE-2017-16879)

    Chung-Yi Lin discovered that ncurses was incorrectly handling access to invalid memory areas when parsing     terminfo or termcap entries where the use-name had invalid syntax. An attacker could possibly use this     issue to cause a denial of service. (CVE-2018-19211)

    It was discovered that ncurses was incorrectly performing bounds checks when processing invalid hashcodes.
    An attacker could possibly use this issue to cause a denial of service or to expose sensitive information.
    (CVE-2019-17594)

    It was discovered that ncurses was incorrectly handling end-of-string characters when processing terminfo     and termcap files. An attacker could possibly use this issue to cause a denial of service or to expose     sensitive information. (CVE-2019-17595)

    It was discovered that ncurses was incorrectly handling end-of-string characters when converting between     termcap and terminfo formats. An attacker could possibly use this issue to cause a denial of service or     execute arbitrary code. (CVE-2021-39537)

    It was discovered that ncurses was incorrectly performing bounds checks when dealing with corrupt terminfo     data while reading a terminfo file. An attacker could possibly use this issue to cause a denial of service     or to expose sensitive information. (CVE-2022-29458)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.06, has ncurses packages installed that are affected by multiple vulnerabilities:

  - In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will     lead to a remote arbitrary code execution attack. (CVE-2017-10685)

  - In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will     lead to a remote arbitrary code execution attack. (CVE-2017-10684)

  - In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11112)

  - In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11113)

  - There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A     crafted input will lead to a remote denial of service attack. (CVE-2017-13728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo     library in ncurses before 6.1-20191012. (CVE-2019-17595)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4426 advisory.

  - There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo     library in ncurses before 6.1-20191012. (CVE-2019-17594)

  - There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo     library in ncurses before 6.1-20191012. (CVE-2019-17595)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of ncurses installed on the remote host is prior to 6.0-8.20170212. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2412 advisory.

    There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo     library in ncurses before 6.1-20191012. (CVE-2019-17594)

    There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo     library in ncurses before 6.1-20191012. (CVE-2019-17595)

    Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19185)

    Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19186)

    Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19187)

    Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19188)

    Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1     allows remote attackers to cause a denial of service via crafted command. (CVE-2020-19189)

    Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote     attackers to cause a denial of service via crafted command. (CVE-2020-19190)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ncurses fixes the following issues :

Security issues fixed :

  - CVE-2019-17594: Fixed a heap-based buffer over-read in     the _nc_find_entry function (bsc#1154036).

  - CVE-2019-17595: Fixed a heap-based buffer over-read in     the fmt_entry function (bsc#1154037).

Non-security issue fixed :

  - Removed screen.xterm from terminfo database     (bsc#1103320).

This update was imported from the SUSE:SLE-15:Update update project.

An update of the ncurses package has been released.

According to the versions of the ncurses packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - There is a heap-based buffer over-read in the fmt_entry     function in tinfo/comp_hash.c in the terminfo library     in ncurses before 6.1-20191012.(CVE-2019-17595)

  - There is a heap-based buffer over-read in the
    _nc_find_entry function in tinfo/comp_hash.c in the     terminfo library in ncurses before     6.1-20191012.(CVE-2019-17594)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202101-28 (ncurses: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ncurses. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - There is a heap-based buffer over-read in the fmt_entry     function in tinfo/comp_hash.c in the terminfo library     in ncurses before 6.1-20191012.(CVE-2019-17595)

  - There is a heap-based buffer over-read in the
    _nc_find_entry function in tinfo/comp_hash.c in the     terminfo library in ncurses before     6.1-20191012.(CVE-2019-17594)

  - There is an illegal address access in the
    _nc_safe_strcat function in strings.c in ncurses 6.0     that will lead to a remote denial of service     attack.(CVE-2017-13734)

  - There is an illegal address access in the fmt_entry     function in progs/dump_entry.c in ncurses 6.0 that     might lead to a remote denial of service     attack.(CVE-2017-13733)

  - There is an illegal address access in the function     dump_uses() in progs/dump_entry.c in ncurses 6.0 that     might lead to a remote denial of service     attack.(CVE-2017-13732)

  - There is an illegal address access in the function     postprocess_termcap() in parse_entry.c in ncurses 6.0     that will lead to a remote denial of service     attack.(CVE-2017-13731)

  - There is an illegal address access in the function
    _nc_read_entry_source() in progs/tic.c in ncurses 6.0     that might lead to a remote denial of service     attack.(CVE-2017-13730)

  - There is an illegal address access in the _nc_save_str     function in alloc_entry.c in ncurses 6.0. It will lead     to a remote denial of service attack.(CVE-2017-13729)

  - There is an infinite loop in the next_char function in     comp_scan.c in ncurses 6.0, related to libtic. A     crafted input will lead to a remote denial of service     attack.(CVE-2017-13728)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
155184	RHEL 8：ncurses (RHSA-2021:4426)	Nessus	Red Hat Local Security Checks	2021/11/11	2024/11/7	medium
155409	Oracle Linux 8：ncurses (ELSA-2021-4426)	Nessus	Oracle Linux Local Security Checks	2021/11/17	2024/11/1	medium
157717	AlmaLinux 8 : ncurses (ALSA-2021:4426)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/10	medium
131159	SUSE SLED15 / SLES15 Security Update : ncurses (SUSE-SU-2019:2997-1)	Nessus	SuSE Local Security Checks	2019/11/20	2024/4/10	medium
176244	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : ncurses vulnerabilities (USN-6099-1)	Nessus	Ubuntu Local Security Checks	2023/5/23	2025/9/3	high
141674	EulerOS Virtualization 3.0.2.2 : ncurses (EulerOS-SA-2020-2207)	Nessus	Huawei Local Security Checks	2020/10/21	2024/2/14	medium
162173	Ubuntu 16.04 ESM : ncurses vulnerabilities (USN-5477-1)	Nessus	Ubuntu Local Security Checks	2022/6/14	2024/8/28	high
266267	NewStart CGSL MAIN 6.06 : ncurses Multiple Vulnerabilities (NS-SA-2025-0223)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2025/9/30	critical
222783	Linux Distros Unpatched Vulnerability : CVE-2019-17595	Nessus	Misc.	2025/3/4	2025/9/3	medium
184850	Rocky Linux 8 : ncurses (RLSA-2021:4426)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	medium
187824	Amazon Linux 2 : ncurses (ALAS-2024-2412)	Nessus	Amazon Linux Local Security Checks	2024/1/9	2024/12/11	critical
131278	openSUSE Security Update : ncurses (openSUSE-2019-2550)	Nessus	SuSE Local Security Checks	2019/11/25	2024/4/10	medium
134207	Photon OS 1.0: Ncurses PHSA-2020-1.0-0281	Nessus	PhotonOS Local Security Checks	2020/3/2	2024/3/25	medium
134495	EulerOS Virtualization for ARM 64 3.0.2.0 : ncurses (EulerOS-SA-2020-1206)	Nessus	Huawei Local Security Checks	2020/3/13	2024/3/22	medium
145433	GLSA-202101-28 : ncurses: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2021/1/26	2024/1/26	medium
137951	EulerOS Virtualization 3.0.6.0 : ncurses (EulerOS-SA-2020-1732)	Nessus	Huawei Local Security Checks	2020/7/1	2024/3/5	medium
504054	Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2019-17595)	Tenable OT Security	Tenable.ot	2025/11/13	2025/11/13	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

high

medium

high

critical

medium

medium

critical

medium

medium

medium

medium

medium

medium