Vulnerability · Published Apr 14, 2023 · Assigned by mitre
CVE-2023-29491
High 7.8
In plain English
A high-severity security flaw in the ncurses package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.8High
Exploit odds (30 days)1.0%top 37.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ncurses | 6.1-9.20180224.el8_8.1 | ALSA-2023:5249 |
| AlmaLinux:9 | ncurses | 6.2-10.20210508.el9 | ALSA-2023:6698 |
| AlmaLinux:8 | ncurses-base | 6.1-9.20180224.el8_8.1 | ALSA-2023:5249 |
| AlmaLinux:9 | ncurses-base | 6.2-10.20210508.el9 | ALSA-2023:6698 |
| AlmaLinux:8 | ncurses-c++-libs | 6.1-9.20180224.el8_8.1 | ALSA-2023:5249 |
| AlmaLinux:9 | ncurses-c++-libs | 6.2-10.20210508.el9 | ALSA-2023:6698 |
| AlmaLinux:8 | ncurses-compat-libs | 6.1-9.20180224.el8_8.1 | ALSA-2023:5249 |
| AlmaLinux:8 | ncurses-devel | 6.1-9.20180224.el8_8.1 | ALSA-2023:5249 |
| AlmaLinux:9 | ncurses-devel | 6.2-10.20210508.el9 | ALSA-2023:6698 |
| AlmaLinux:8 | ncurses-libs | 6.1-9.20180224.el8_8.1 | ALSA-2023:5249 |
| AlmaLinux:9 | ncurses-libs | 6.2-10.20210508.el9 | ALSA-2023:6698 |
| AlmaLinux:8 | ncurses-term | 6.1-9.20180224.el8_8.1 | ALSA-2023:5249 |
| AlmaLinux:9 | ncurses-term | 6.2-10.20210508.el9 | ALSA-2023:6698 |
| Alpine:v3.20 | ncurses | 6.4_p20230424-r0 | ALPINE-CVE-2023-29491 |
| Alpine:v3.21 | ncurses | 6.4_p20230424-r0 | ALPINE-CVE-2023-29491 |
| Alpine:v3.22 | ncurses | 6.4_p20230424-r0 | ALPINE-CVE-2023-29491 |
| Alpine:v3.23 | ncurses | 6.4_p20230424-r0 | ALPINE-CVE-2023-29491 |
| Alpine:v3.24 | ncurses | 6.4_p20230424-r0 | ALPINE-CVE-2023-29491 |
| Debian:12 | ncurses | 6.4-3 | DEBIAN-CVE-2023-29491 |
| Debian:13 | ncurses | 6.4-3 | DEBIAN-CVE-2023-29491 |
| Debian:14 | ncurses | 6.4-3 | DEBIAN-CVE-2023-29491 |
| Ubuntu:22.04:LTS | ncurses | 6.3-2ubuntu0.1 | USN-6099-1 |
| Ubuntu:22.04:LTS | ncurses | 6.3-2ubuntu0.1 | UBUNTU-CVE-2023-29491 |
Affected products (as reported)
References
- https://www.openwall.com/lists/oss-security/2023/04/13/4
- http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56
- https://www.openwall.com/lists/oss-security/2023/04/12/5
- [oss-security] 20230419 Re: ncurses fixes upstream mailing-list
- [oss-security] 20230419 RE: [EXTERNAL] Re: ncurses fixes upstream mailing-list
- https://security.netapp.com/advisory/ntap-20230517-0009/
- https://support.apple.com/kb/HT213843
- https://support.apple.com/kb/HT213844
- https://support.apple.com/kb/HT213845
- [debian-lts-announce] 20231203 [SECURITY] [DLA 3682-1] ncurses security update mailing-list
- FEDORA-2024-96090dafaf vendor-advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-202008.html