In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not reproduce for that version according to the maintainer or a reliable third-party

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function     (CVE-2017-10685)

  - In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11112)

  - In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11113)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70 (CVE-2020-19190)

  - ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c (CVE-2021-39537)

  - In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will     lead to a denial of service attack. The product proceeds to the dereference code path even after a     dubious character `*' in name or alias field detection. (CVE-2018-19211)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function     (CVE-2017-10685)

  - In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11112)

  - In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11113)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function     (CVE-2017-10685)

  - In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will     lead to a remote arbitrary code execution attack. (CVE-2017-10684)

  - In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11112)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Severity
198984	RHEL 6 : ncurses (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198970	RHEL 8 : ncurses (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198914	RHEL 5 : ncurses (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198896	RHEL 7 : ncurses (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical

Detections

Analytics

CVE-2018-19217

medium

Tenable Plugins

critical

high

critical

critical