Most recent entries from all

ALSA-2023:5249 — Moderate: ncurses security update

Affected: AlmaLinux:8: ncurses, AlmaLinux:8: ncurses-base, AlmaLinux:8: ncurses-c++-libs, AlmaLinux:8: ncurses-compat-libs, AlmaLinux:8: ncurses-devel, AlmaLinux:8: ncurses-libs, AlmaLinux:8: ncurses-term

The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.

Security Fix(es):

* ncurses: Local users can trigger security-relevant memory corruption via malformed data (CVE-2023-29491)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-05772

Withdrawn: BELL-CVE-2023-29491 — CVE-2023-29491 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2023-avi-1015 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entr…

certfr-2023-avi-1015

CLEANSTART-2026-JO18362 — ncurses before 6

Affected: CleanStart: ncurses

Security vulnerability affects the ncurses package. ncurses before 6.

EUVD-2026-259085

fkie_cve-2023-29491

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.

GHSA-vh2x-5rx6-qqhv

gsd-2023-29491

ICSA-23-348-10 — Siemens SIMATIC S7-1500

expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE. shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start o…

msrc_CVE-2023-29491 — ncurses before 6.4 20230408 when used by a setuid application allows local users to trigger security-relevant memory co…

msrc_CVE-2023-29491

OESA-2023-1426 — ncurses security update

Affected: openEuler:20.03-LTS-SP1: ncurses, openEuler:20.03-LTS-SP3: ncurses, openEuler:22.03-LTS: ncurses, openEuler:22.03-LTS-SP1: ncurses, openEuler:22.03-LTS-SP2: ncurses

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.

Security Fix(es):

RHSA-2023:5249 — Red Hat Security Advisory: ncurses security update

ncurses: Local users can trigger security-relevant memory corruption via malformed data

RHSA-2023:7361 — Red Hat Security Advisory: ncurses security update

ncurses: Local users can trigger security-relevant memory corruption via malformed data

SSA-202008 — SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.0

An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is setuid and allows an unprivileged user to be placed in a user namespace where setgroups(2) is permitted. This allows an attacker to remove themselves from a supplementary group, which may allow access to certain filesystem paths if the administrator has used "group blacklisting" (e.g., chmod g-rwx) to restrict access to paths. This flaw effectively reverts a security feature in the kernel (in particular, the /proc/self/setgroups knob) to prevent this sort of privilege escalation. GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey. remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt. binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be exploitable via Local. This vulnerability appears to have been fixed in after commit 3a551c7a1b80fca579461774860574eabfd7f18f. libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the ar…

SUSE-SU-2023:2112-1 — Security update for ncurses

Security update for ncurses

UBUNTU-CVE-2023-29491

Affected: Ubuntu:Pro:14.04:LTS: ncurses, Ubuntu:Pro:16.04:LTS: ncurses, Ubuntu:18.04:LTS: ncurses, Ubuntu:20.04:LTS: ncurses, Ubuntu:22.04:LTS: ncurses

WID-SEC-W-2023-2390 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Manipulation von Dateien

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren.