CVE-2019-17594

ncurses: The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reason...

CVE-2019-17594 is fixed in 32 products on 1 platform, first by lib32ncurses6 6.1+20191019-1ubuntu1, released October 14, 2019. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.4
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0055
46th percentile

The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo. Security Fix(es): * ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c (CVE-2019-17594) * ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c (CVE-2019-17595) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
lib32ncurses5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 lib32ncurses5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
lib32ncurses6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 lib32ncurses6 6.1+20191019-1ubuntu1 Oct 14, 2019
lib32ncursesw5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 lib32ncursesw5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
lib32ncursesw6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 lib32ncursesw6 6.1+20191019-1ubuntu1 Oct 14, 2019
lib32tinfo5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 lib32tinfo5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
lib32tinfo6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 lib32tinfo6 6.1+20191019-1ubuntu1 Oct 14, 2019
lib64ncurses5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 lib64ncurses5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
lib64ncurses6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 lib64ncurses6 6.1+20191019-1ubuntu1 Oct 14, 2019
lib64ncursesw6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 lib64ncursesw6 6.1+20191019-1ubuntu1 Oct 14, 2019
lib64tinfo5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 lib64tinfo5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
lib64tinfo6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 lib64tinfo6 6.1+20191019-1ubuntu1 Oct 14, 2019
libncurses5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 libncurses5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
libncurses5 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 libncurses5 6.1+20191019-1ubuntu1 Oct 14, 2019
libncurses6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 libncurses6 6.1+20191019-1ubuntu1 Oct 14, 2019
libncursesw5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 libncursesw5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
libncursesw5 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 libncursesw5 6.1+20191019-1ubuntu1 Oct 14, 2019
libncursesw6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 libncursesw6 6.1+20191019-1ubuntu1 Oct 14, 2019
libtinfo5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 libtinfo5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
libtinfo5 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 libtinfo5 6.1+20191019-1ubuntu1 Oct 14, 2019
libtinfo6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 libtinfo6 6.1+20191019-1ubuntu1 Oct 14, 2019
libx32ncurses5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 libx32ncurses5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
libx32ncurses6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 libx32ncurses6 6.1+20191019-1ubuntu1 Oct 14, 2019
libx32ncursesw5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 libx32ncursesw5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
libx32ncursesw6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 libx32ncursesw6 6.1+20191019-1ubuntu1 Oct 14, 2019
libx32tinfo5 · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 libx32tinfo5 6.1-1ubuntu1.18.04.1 Apr 13, 2023
libx32tinfo6 · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 libx32tinfo6 6.1+20191019-1ubuntu1 Oct 14, 2019
ncurses · RHEL 8 0:6.1-9.20180224.el8 RHSA-2021:4426 Nov 9, 2021
ncurses · almalinux 8 6.1-9.20180224.el8 ALSA-2021:4426 Nov 9, 2021
ncurses · ol 8 0:6.1-9.20180224.el8 ELSA-2021-4426 Nov 16, 2021
ncurses · rocky 8 0:6.1-9.20180224.el8 RLSA-2021:4426 Nov 9, 2021
ncurses-base · RHEL 8 0:6.1-9.20180224.el8 RHSA-2021:4426 Nov 9, 2021
ncurses-base · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 ncurses-base 6.1-1ubuntu1.18.04.1 Apr 13, 2023
ncurses-base · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 ncurses-base 6.1+20191019-1ubuntu1 Oct 14, 2019
ncurses-base · almalinux 8 6.1-9.20180224.el8 ALSA-2021:4426 Nov 9, 2021
ncurses-base · ol 8 0:6.1-9.20180224.el8 ELSA-2021-4426 Nov 16, 2021
ncurses-bin · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 ncurses-bin 6.1-1ubuntu1.18.04.1 Apr 13, 2023
ncurses-bin · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 ncurses-bin 6.1+20191019-1ubuntu1 Oct 14, 2019
ncurses-c++-libs · RHEL 8 0:6.1-9.20180224.el8 RHSA-2021:4426 Nov 9, 2021
ncurses-c++-libs · almalinux 8 6.1-9.20180224.el8 ALSA-2021:4426 Nov 9, 2021
ncurses-c++-libs · ol 8 0:6.1-9.20180224.el8 ELSA-2021-4426 Nov 16, 2021
ncurses-compat-libs · RHEL 8 0:6.1-9.20180224.el8 RHSA-2021:4426 Nov 9, 2021
ncurses-compat-libs · almalinux 8 6.1-9.20180224.el8 ALSA-2021:4426 Nov 9, 2021
ncurses-compat-libs · ol 8 0:6.1-9.20180224.el8 ELSA-2021-4426 Nov 16, 2021
ncurses-devel · RHEL 8 0:6.1-9.20180224.el8 RHSA-2021:4426 Nov 9, 2021
ncurses-devel · almalinux 8 6.1-9.20180224.el8 ALSA-2021:4426 Nov 9, 2021
ncurses-devel · ol 8 0:6.1-9.20180224.el8 ELSA-2021-4426 Nov 16, 2021
ncurses-examples · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 ncurses-examples 6.1-1ubuntu1.18.04.1 Apr 13, 2023
ncurses-examples · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 ncurses-examples 6.1+20191019-1ubuntu1 Oct 14, 2019
ncurses-libs · RHEL 8 0:6.1-9.20180224.el8 RHSA-2021:4426 Nov 9, 2021
ncurses-libs · almalinux 8 6.1-9.20180224.el8 ALSA-2021:4426 Nov 9, 2021
ncurses-libs · ol 8 0:6.1-9.20180224.el8 ELSA-2021-4426 Nov 16, 2021
ncurses-term · RHEL 8 0:6.1-9.20180224.el8 RHSA-2021:4426 Nov 9, 2021
ncurses-term · Ubuntu 18.04.6 LTS (bionic) 6.1-1ubuntu1.18.04.1 ncurses-term 6.1-1ubuntu1.18.04.1 Apr 13, 2023
ncurses-term · Ubuntu 20.04 LTS (focal) 6.1+20191019-1ubuntu1 ncurses-term 6.1+20191019-1ubuntu1 Oct 14, 2019
ncurses-term · almalinux 8 6.1-9.20180224.el8 ALSA-2021:4426 Nov 9, 2021
ncurses-term · ol 8 0:6.1-9.20180224.el8 ELSA-2021-4426 Nov 16, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.