CVE-2021-39537
Fixed in a distro release EPSS 3%
An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
Products: invisible-island ncurses, apple mac_os_x, apple macos
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.12 | ncurses | 6.2_p20200523-r1 |
| Alpine 3.13 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.14 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.15 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.16 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.17 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.18 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.19 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.20 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.21 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.22 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.23 | ncurses | 6.2_p20200530-r0 |
| Alpine 3.24 | ncurses | 6.2_p20200530-r0 |
| Amazon Linux 2 | ncurses | 6.0-8.20170212.amzn2.1.4 |
| Amazon Linux 2 | ncurses-base | 6.0-8.20170212.amzn2.1.4 |
| Amazon Linux 2 | ncurses-c++-libs | 6.0-8.20170212.amzn2.1.4 |
| Amazon Linux 2 | ncurses-compat-libs | 6.0-8.20170212.amzn2.1.4 |
| Amazon Linux 2 | ncurses-devel | 6.0-8.20170212.amzn2.1.4 |
| Amazon Linux 2 | ncurses-libs | 6.0-8.20170212.amzn2.1.4 |
| Amazon Linux 2 | ncurses-static | 6.0-8.20170212.amzn2.1.4 |
| Amazon Linux 2 | ncurses-term | 6.0-8.20170212.amzn2.1.4 |
| Amazon Linux 2023 | ncurses | 6.2-4.20200222.amzn2023.0.3 |
| Amazon Linux 2023 | ncurses-base | 6.2-4.20200222.amzn2023.0.3 |
| Amazon Linux 2023 | ncurses-c++-libs | 6.2-4.20200222.amzn2023.0.3 |
| Amazon Linux 2023 | ncurses-compat-libs | 6.2-4.20200222.amzn2023.0.3 |
| Amazon Linux 2023 | ncurses-devel | 6.2-4.20200222.amzn2023.0.3 |
| Amazon Linux 2023 | ncurses-libs | 6.2-4.20200222.amzn2023.0.3 |
| Amazon Linux 2023 | ncurses-static | 6.2-4.20200222.amzn2023.0.3 |
| Amazon Linux 2023 | ncurses-term | 6.2-4.20200222.amzn2023.0.3 |
| Arch Linux | ncurses | 6.3-1 |
| Debian 10 | ncurses | 6.1+20181013-2+deb10u5 |
| Debian 12 | ncurses | 6.2+20200912-1 |
| Debian 13 | ncurses | 6.2+20200912-1 |
| Debian 14 | ncurses | 6.2+20200912-1 |
| SUSE Linux Enterprise Micro 5.0 | ncurses | 6.1-5.9.1 |
| SUSE Linux Enterprise Micro 5.1 | ncurses | 6.1-5.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | ncurses | 6.1-5.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | ncurses | 6.1-5.9.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | ncurses | 6.1-5.9.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | ncurses | 6.1-5.9.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP2 | ncurses | 6.1-5.9.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP3 | ncurses | 6.1-5.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | ncurses | 5.9-75.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | ncurses | 5.9-75.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | ncurses | 5.9-75.1 |
| Ubuntu 18.04 LTS | ncurses | 6.1-1ubuntu1.18.04.1 |
| Ubuntu 20.04 LTS | ncurses | 6.2-0ubuntu2.1 |
| Ubuntu 22.04 LTS | ncurses | 6.3-2ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | ncurses | 5.9+20140118-1ubuntu1+esm3 |
| Ubuntu Pro 14.04 LTS | ncurses | 5.9+20140118-1ubuntu1+esm2 |
| Ubuntu Pro 16.04 LTS | ncurses | 6.0+20160213-1ubuntu1+esm2 |
| Ubuntu Pro 16.04 LTS | ncurses | 6.0+20160213-1ubuntu1+esm3 |
| openSUSE Leap 15.2 | ncurses | 6.1-lp152.8.3.1 |
| openSUSE Leap 15.3 | ncurses | 6.1-5.9.1 |