Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 7 MGASA-2019-0387 High: Ncurses Heap-Based Buffer Over-Read

mageia
Calendar Grey December 13, 2019
Dist Mageia Esm H88
Debian 2022-0763 enhances libcurl modules to mitigate risks linked to severe remote-code execution threats.
Updated ncurses packages fix security vulnerabilities: Heap-based buffer over-read in the _nc_find_entry function (CVE-2019-17594)

Summary

Updated ncurses packages fix security vulnerabilities:
Heap-based buffer over-read in the _nc_find_entry function (CVE-2019-17594).
Heap-based buffer over-read in the fmt_entry function (CVE-2019-17595).

References

- https://bugs.mageia.org/show_bug.cgi?id=25814

- - https://www.cve.org/CVERecord?id=CVE-2019-17594

- https://www.cve.org/CVERecord?id=CVE-2019-17595

Topics%20covered

Topics Covered

security advisory security issue update ncurses buffer over-read Mageia heap-based

Resolution

SRPMS

- 7/core/ncurses-6.1-20181117.3.1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 14 Dec 2019
URL: https://advisories.mageia.org/MGASA-2019-0387.html
Type: security
CVE: CVE-2019-17594, CVE-2019-17595

Topics%20covered

Topics Covered

security advisory security issue update ncurses buffer over-read Mageia heap-based

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here