Ncurses Vulnerabilidad

Cronología

Versión

6.0	14
6.1	10
5.0	2
5.1	2
5.2	2

Contramedidas

Official Fix	19
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	11

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	1
Not Defined	29

Vector de acceso

Not Defined	0
Physical	0
Local	4
Adjacent	3
Network	23

Autenticación

Not Defined	0
High	0
Low	10
None	20

La interacción del usuario

Not Defined	0
Required	5
None	25

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	16
≤7	6
≤8	2
≤9	3
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	16
≤7	6
≤8	2
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	14
≤7	3
≤8	4
≤9	0
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	1
≤7	14
≤8	5
≤9	1
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	10
<2k	10
<5k	10
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	23
<2k	6
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (108): 5.0, 5.1, 5.1.1, 5.1.2, 5.2, 5.3, 5.4, 5.5, 5.6, 5.7, 5.8, 5.9, 5.10, 5.11, 5.12, 5.13, 5.14, 5.15, 5.16, 5.17, 5.18, 5.19, 5.20, 5.21, 5.22, 5.23, 5.24, 5.25, 5.26, 5.27, 5.28, 5.29, 5.30, 5.31, 5.32, 5.33, 5.34, 5.35, 5.36, 5.37, 5.38, 5.39, 5.40, 5.41, 5.42, 5.43, 5.44, 5.45, 5.46, 5.47, 5.48, 5.49, 5.50, 5.51, 5.52, 5.53, 5.54, 5.55, 5.56, 5.57, 5.58, 5.59, 5.60, 5.61, 5.62, 5.63, 5.64, 5.65, 5.66, 5.67, 5.68, 5.69, 5.70, 5.71, 5.72, 5.73, 5.74, 5.75, 5.76, 5.77, 5.78, 5.79, 5.80, 5.81, 5.82, 5.83, 5.84, 5.85, 5.86, 5.87, 5.88, 5.89, 5.90, 5.91, 5.92, 5.93, 5.94, 5.95, 5.96, 5.97, 5.98, 5.99, 6.0, 6.1, 6.2, 6.2-1, 6.3, 6.4-20230610

Link to Product Website: https://www.gnu.org/

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2024-01-26	3.5	3.5	GNU ncurses tgetstr denegación de servicio	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-45918
2023-08-23	5.4	5.3	ncurses Command comp_hash.c _nc_find_entry desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2020-19190
2023-08-23	5.4	5.3	ncurses Command parse_entry.c postprocess_terminfo desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2020-19189
2023-08-23	5.4	5.3	ncurses Command dump_entry.c fmt_entry desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2020-19188
2023-08-23	5.4	5.3	ncurses Command dump_entry.c fmt_entry desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-19187
2023-08-23	5.4	5.3	ncurses Command comp_hash.c _nc_find_entry desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2020-19186
2023-08-23	6.4	6.3	ncurses Command dump_entry.c one_one_mapping desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	CVE-2020-19185
2023-04-14	5.3	5.1	ncurses Environment Variable .terminfo desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-29491
2022-04-19	5.5	5.3	ncurses read_entry.c convert_strings divulgación de información	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-29458
2021-09-21	5.5	5.5	ncurses captoinfo.c _nc_captoinfo desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2021-39537