ALT-PU-2018-1601-2

Package update ncurses in branch sisyphus

Version6.1.20180407-alt1

Published2026-02-04

Max severityCRITICAL

Severity:

Closed issues (4)

HIGH7.5

An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are mishandled.

Published: 2019-08-26Modified: 2024-11-21

CVSS 2.0MEDIUM 6.4

CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSS 3.xHIGH 7.5

CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References

CRITICAL9.8

An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mishandled.

Published: 2019-08-26Modified: 2024-11-21

CVSS 2.0HIGH 7.5

CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS 3.xCRITICAL 9.8

CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

GHSA-32v7-ghpr-c8hg

HIGH7.5

Mishandling of format strings in ncurses

Published: 2021-08-25Modified: 2023-06-13

CVSS 3.xHIGH 7.5

CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References

GHSA-g7r5-x7cr-vm3v

CRITICAL9.8

Buffer overflow and format vulnerabilities in ncurses

Published: 2021-08-25Modified: 2023-06-13

CVSS 3.xCRITICAL 9.8

CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References