Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-17595

There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.6%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 5.8
Products affected by CVE-2019-17595
  • Gnu » Ncurses » Version: N/A
    cpe:2.3:a:gnu:ncurses:-
  • Gnu » Ncurses » Version: 4.0
    cpe:2.3:a:gnu:ncurses:4.0
  • Gnu » Ncurses » Version: 4.1
    cpe:2.3:a:gnu:ncurses:4.1
  • Gnu » Ncurses » Version: 4.2
    cpe:2.3:a:gnu:ncurses:4.2
  • Gnu » Ncurses » Version: 5.0
    cpe:2.3:a:gnu:ncurses:5.0
  • Gnu » Ncurses » Version: 5.1
    cpe:2.3:a:gnu:ncurses:5.1
  • Gnu » Ncurses » Version: 5.2.
    cpe:2.3:a:gnu:ncurses:5.2.
  • Gnu » Ncurses » Version: 5.3
    cpe:2.3:a:gnu:ncurses:5.3
  • Gnu » Ncurses » Version: 5.4
    cpe:2.3:a:gnu:ncurses:5.4
  • Gnu » Ncurses » Version: 5.5
    cpe:2.3:a:gnu:ncurses:5.5
  • Gnu » Ncurses » Version: 5.6
    cpe:2.3:a:gnu:ncurses:5.6
  • Gnu » Ncurses » Version: 5.7
    cpe:2.3:a:gnu:ncurses:5.7
  • Gnu » Ncurses » Version: 5.8
    cpe:2.3:a:gnu:ncurses:5.8
  • Gnu » Ncurses » Version: 5.9
    cpe:2.3:a:gnu:ncurses:5.9
  • Gnu » Ncurses » Version: 6.0
    cpe:2.3:a:gnu:ncurses:6.0
  • Gnu » Ncurses » Version: 6.1
    cpe:2.3:a:gnu:ncurses:6.1
  • Gnu » Ncurses » Version: 6.1.20180414
    cpe:2.3:a:gnu:ncurses:6.1.20180414
  • Gnu » Ncurses » Version: 6.1.20191012
    cpe:2.3:a:gnu:ncurses:6.1.20191012
  • Opensuse » Leap » Version: 15.0
    cpe:2.3:o:opensuse:leap:15.0
  • Opensuse » Leap » Version: 15.1
    cpe:2.3:o:opensuse:leap:15.1


Contact Us

Shodan ® - All rights reserved