Wind River Support Network

HomeDefectsLIN1021-5612
Acknowledged

LIN1021-5612 : Security Advisory - ncurses - CVE-2023-29491

Created: Apr 14, 2023    Updated: Mar 4, 2024
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.

CREATE(Triage):(User=admin) CVE-2023-29491 (https://nvd.nist.gov/vuln/detail/CVE-2023-29491)

CVEs


Live chat
Online