The version of ncurses installed on the remote host is prior to 6.0-8.20170212. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2412 advisory.

    There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo     library in ncurses before 6.1-20191012. (CVE-2019-17594)

    There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo     library in ncurses before 6.1-20191012. (CVE-2019-17595)

    Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19185)

    Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19186)

    Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19187)

    Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19188)

    Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1     allows remote attackers to cause a denial of service via crafted command. (CVE-2020-19189)

    Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote     attackers to cause a denial of service via crafted command. (CVE-2020-19190)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : ncurses (ALAS-2024-2412)

high Nessus Plugin ID 187824

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Dec 12, 2024, 9:55 AM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Detection (updated detection logic) Plugin metadata Plugin Feed: 202412120955
Version 1.1 Jan 10, 2024, 3:27 PM Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202401101527
Version 1.0 Jan 10, 2024, 8:45 AM New Plugin Feed: 202401100845