CVE-2022-29458

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convertstrings in tinfo/readentry.c in the terminfo library.

References

Affected packages

Git / github.com/mirror/ncurses

Affected ranges

Type

GIT

Repo

https://github.com/mirror/ncurses

Events

Introduced

Fixed

deb0d07e8eb4803b9e9653359eab17a30d04369d

Introduced

Last affected

deb0d07e8eb4803b9e9653359eab17a30d04369d

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "6.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.3-NA"
        }
    ]
}

Affected versions

v4.*

v4.1

v4.2

v5.*

v5.0

v5.1

v5.2

v5.3

v5.4

v5.5

v5.6

v5.7

v5.8

v5.9

v6.*

v6.0

v6.1

v6.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29458.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "13.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    }
]