CVE-2022-29458

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-29458
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29458.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-29458
Downstream
ALPINE (1)
AZL (1)
BELL (1)
CGA (2)
CLSA (1)
DEBIAN (1)
JLSEC (1)
OESA (1)
openSUSE (1)
RHSA (4)
RLSA (1)
SUSE (3)
UBUNTU (1)
Related
CGA (1)
openSUSE (1)
SUSE (3)
Published
2022-04-18T00:00:00Z
Modified
2026-07-15T02:05:23Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.

Database specific 
{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29458.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "6.3"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}
References

Affected packages

Git / github.com/mirror/ncurses

Affected ranges

Type
GIT
Repo
https://github.com/mirror/ncurses
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
deb0d07e8eb4803b9e9653359eab17a30d04369d
Introduced
deb0d07e8eb4803b9e9653359eab17a30d04369d
Last Affected
deb0d07e8eb4803b9e9653359eab17a30d04369d
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:gnu:ncurses:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnu:ncurses:6.3:-:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "6.3"
        },
        {
            "introduced":  "6.3-NA"
        },
        {
            "last_affected":  "6.3-NA"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

6.*
6.3-NA
v4.*
v4.1
v4.2
v5.*
v5.0
v5.1
v5.2
v5.3
v5.4
v5.5
v5.6
v5.7
v5.8
v5.9
v6.*
v6.0
v6.1
v6.2
v6.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29458.json"