USN-5477-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-5477-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5477-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-5477-1
Related
Published
2022-06-14T11:17:52.275503Z
Modified
2022-06-14T11:17:52.275503Z
Summary
ncurses vulnerabilities
Details

Hosein Askari discovered that ncurses was incorrectly performing memory management operations when dealing with long filenames while writing structures into the file system. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2017-16879)

Chung-Yi Lin discovered that ncurses was incorrectly handling access to invalid memory areas when parsing terminfo or termcap entries where the use-name had invalid syntax. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-19211)

It was discovered that ncurses was incorrectly performing bounds checks when processing invalid hashcodes. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. (CVE-2019-17594)

It was discovered that ncurses was incorrectly handling end-of-string characters when processing terminfo and termcap files. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. (CVE-2019-17595)

It was discovered that ncurses was incorrectly handling end-of-string characters when converting between termcap and terminfo formats. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-39537)

It was discovered that ncurses was incorrectly performing bounds checks when dealing with corrupt terminfo data while reading a terminfo file. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. (CVE-2022-29458)

References

Affected packages

Ubuntu:Pro:14.04:LTS / ncurses

Package

Name
ncurses
Purl
pkg:deb/ubuntu/ncurses@5.9+20140118-1ubuntu1+esm2?arch=src?distro=trusty/esm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.9+20140118-1ubuntu1+esm2

Affected versions

5.*

5.9+20130608-1ubuntu1
5.9+20131221-1ubuntu1
5.9+20140118-1ubuntu1
5.9+20140118-1ubuntu1+esm1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "libncurses5": "5.9+20140118-1ubuntu1+esm2",
            "libx32ncurses5-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libx32ncursesw5": "5.9+20140118-1ubuntu1+esm2",
            "lib32ncursesw5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libx32tinfo-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "lib32ncurses5": "5.9+20140118-1ubuntu1+esm2",
            "lib32ncursesw5-dev": "5.9+20140118-1ubuntu1+esm2",
            "libx32ncursesw5-dev": "5.9+20140118-1ubuntu1+esm2",
            "libx32tinfo-dev": "5.9+20140118-1ubuntu1+esm2",
            "lib32tinfo5": "5.9+20140118-1ubuntu1+esm2",
            "libncurses5-dbg": "5.9+20140118-1ubuntu1+esm2",
            "lib32ncursesw5": "5.9+20140118-1ubuntu1+esm2",
            "lib32tinfo-dev": "5.9+20140118-1ubuntu1+esm2",
            "libtinfo5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "ncurses-base": "5.9+20140118-1ubuntu1+esm2",
            "libx32tinfo5": "5.9+20140118-1ubuntu1+esm2",
            "libncursesw5": "5.9+20140118-1ubuntu1+esm2",
            "libx32ncurses5-dev": "5.9+20140118-1ubuntu1+esm2",
            "ncurses-bin-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libncursesw5-dbg": "5.9+20140118-1ubuntu1+esm2",
            "libtinfo-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libx32tinfo5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "lib64tinfo5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libncursesw5-dev": "5.9+20140118-1ubuntu1+esm2",
            "libncurses5-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "lib64ncurses5-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libncurses5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libx32ncurses5": "5.9+20140118-1ubuntu1+esm2",
            "lib64ncurses5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libncurses5-dev": "5.9+20140118-1ubuntu1+esm2",
            "libncursesw5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "lib32ncursesw5-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libx32ncursesw5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "lib32tinfo5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "ncurses-examples": "5.9+20140118-1ubuntu1+esm2",
            "ncurses-doc": "5.9+20140118-1ubuntu1+esm2",
            "ncurses-examples-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "lib32ncurses5-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libtinfo5-dbg": "5.9+20140118-1ubuntu1+esm2",
            "libtinfo5": "5.9+20140118-1ubuntu1+esm2",
            "ncurses-term": "5.9+20140118-1ubuntu1+esm2",
            "lib64tinfo5": "5.9+20140118-1ubuntu1+esm2",
            "lib32tinfo-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libncursesw5-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "ncurses-bin": "5.9+20140118-1ubuntu1+esm2",
            "libx32ncursesw5-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "lib32ncurses5-dev-dbgsym": "5.9+20140118-1ubuntu1+esm2",
            "libtinfo-dev": "5.9+20140118-1ubuntu1+esm2",
            "lib64ncurses5-dev": "5.9+20140118-1ubuntu1+esm2",
            "lib64ncurses5": "5.9+20140118-1ubuntu1+esm2",
            "lib32ncurses5-dev": "5.9+20140118-1ubuntu1+esm2",
            "libx32ncurses5-dbgsym": "5.9+20140118-1ubuntu1+esm2"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / ncurses

Package

Name
ncurses
Purl
pkg:deb/ubuntu/ncurses@6.0+20160213-1ubuntu1+esm2?arch=src?distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.0+20160213-1ubuntu1+esm2

Affected versions

5.*

5.9+20150516-2ubuntu1

6.*

6.0+20151024-2ubuntu1
6.0+20151024-2ubuntu2
6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "libncurses5": "6.0+20160213-1ubuntu1+esm2",
            "libx32ncurses5-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libx32ncursesw5": "6.0+20160213-1ubuntu1+esm2",
            "lib32ncursesw5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libx32tinfo-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "lib32ncurses5": "6.0+20160213-1ubuntu1+esm2",
            "lib32ncursesw5-dev": "6.0+20160213-1ubuntu1+esm2",
            "libx32ncursesw5-dev": "6.0+20160213-1ubuntu1+esm2",
            "libx32tinfo-dev": "6.0+20160213-1ubuntu1+esm2",
            "lib32tinfo5": "6.0+20160213-1ubuntu1+esm2",
            "libncurses5-dbg": "6.0+20160213-1ubuntu1+esm2",
            "lib32ncursesw5": "6.0+20160213-1ubuntu1+esm2",
            "lib32tinfo-dev": "6.0+20160213-1ubuntu1+esm2",
            "libtinfo5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "ncurses-base": "6.0+20160213-1ubuntu1+esm2",
            "libx32tinfo5": "6.0+20160213-1ubuntu1+esm2",
            "libncursesw5": "6.0+20160213-1ubuntu1+esm2",
            "libx32ncurses5-dev": "6.0+20160213-1ubuntu1+esm2",
            "ncurses-bin-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libncursesw5-dbg": "6.0+20160213-1ubuntu1+esm2",
            "libtinfo-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libx32tinfo5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "lib64tinfo5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libncursesw5-dev": "6.0+20160213-1ubuntu1+esm2",
            "libncurses5-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "lib64ncurses5-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libncurses5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libx32ncurses5": "6.0+20160213-1ubuntu1+esm2",
            "lib64ncurses5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libncurses5-dev": "6.0+20160213-1ubuntu1+esm2",
            "libncursesw5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "lib32ncursesw5-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libx32ncursesw5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "lib32tinfo5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "ncurses-examples": "6.0+20160213-1ubuntu1+esm2",
            "ncurses-doc": "6.0+20160213-1ubuntu1+esm2",
            "ncurses-examples-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "lib32ncurses5-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libtinfo5-dbg": "6.0+20160213-1ubuntu1+esm2",
            "libtinfo5": "6.0+20160213-1ubuntu1+esm2",
            "ncurses-term": "6.0+20160213-1ubuntu1+esm2",
            "lib64tinfo5": "6.0+20160213-1ubuntu1+esm2",
            "lib32tinfo-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libncursesw5-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "ncurses-bin": "6.0+20160213-1ubuntu1+esm2",
            "libx32ncursesw5-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "lib32ncurses5-dev-dbgsym": "6.0+20160213-1ubuntu1+esm2",
            "libtinfo-dev": "6.0+20160213-1ubuntu1+esm2",
            "lib64ncurses5-dev": "6.0+20160213-1ubuntu1+esm2",
            "lib64ncurses5": "6.0+20160213-1ubuntu1+esm2",
            "lib32ncurses5-dev": "6.0+20160213-1ubuntu1+esm2",
            "libx32ncurses5-dbgsym": "6.0+20160213-1ubuntu1+esm2"
        }
    ]
}