NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS. When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM inst…

Affected: openEuler:20.03-LTS-SP1: ncurses, openEuler:20.03-LTS-SP3: ncurses, openEuler:20.03-LTS-SP4: ncurses, openEuler:22.03-LTS: ncurses, openEuler:22.03-LTS-SP1: ncurses, openEuler:22.03-LTS-SP2: ncurses

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses. Security Fix(es): NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().(CVE-2023-50495)

Security update for ncurses

Affected: Ubuntu:Pro:14.04:LTS: ncurses, Ubuntu:Pro:16.04:LTS: ncurses, Ubuntu:Pro:18.04:LTS: ncurses, Ubuntu:Pro:20.04:LTS: ncurses, Ubuntu:22.04:LTS: ncurses

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen.