GHSA-32v7-ghpr-c8hg

    Dashboard / Vulnerabilities / GHSA-32v7-ghpr-c8hg

    GHSA-32v7-ghpr-c8hg

    Published: 25 Aug 2021Last Modified: 8 Nov 2023

    Summary: Mishandling of format strings in ncurses

    Details: ncurses exposes functions from the ncurses library which: * Pass buffers without length to C functions that may write an arbitrary amount of data, leading to a buffer overflow. (instr, mvwinstr, etc) * Passes rust &str to strings expecting C format arguments, allowing hostile input to execute a format string attack, which trivially allows writing arbitrary data to stack memory (functions in the printw family).

    References: https://nvd.nist.gov/vuln/detail/CVE-2019-15547, https://github.com/RustSec/advisory-db/issues/106, https://github.com/jeaye/ncurses-rs/issues/172, https://github.com/jeaye/ncurses-rs, https://rustsec.org/advisories/RUSTSEC-2019-0006.html

    Affected packages

    Package

    Name: ncurses

    Purl: pkg:cargo/ncurses

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-32v7-ghpr-c8hg | CVE-DB