n
curses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
References
Configurations
History
04 Nov 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Nov 2024, 07:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 - | |
| References | () http://www.openwall.com/lists/oss-security/2023/04/19/10 - Mailing List, Patch, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2023/04/19/11 - Exploit, Mailing List, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ - | |
| References | () https://security.netapp.com/advisory/ntap-20230517-0009/ - | |
| References | () https://support.apple.com/kb/HT213843 - | |
| References | () https://support.apple.com/kb/HT213844 - | |
| References | () https://support.apple.com/kb/HT213845 - | |
| References | () https://www.openwall.com/lists/oss-security/2023/04/12/5 - Mailing List | |
| References | () https://www.openwall.com/lists/oss-security/2023/04/13/4 - Mailing List, Patch |
Information
Published : 2023-04-14 01:15
Updated : 2025-11-04 19:15
NVD link : CVE-2023-29491
Mitre link : CVE-2023-29491
CVE.ORG link : CVE-2023-29491
JSON object : View
CWE
CWE-787
Out-of-bounds Write