Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-29458

Fixed in a distro release EPSS 1%CVSS 7.1

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.

Published 2022-04-18 · CVE record · OSV

Products: invisible-island ncurses, apple macos, debian_linux

Distro releases

ReleasePackageFixed in
Alpine 3.13ncurses6.2_p20210109-r1
Alpine 3.14ncurses6.2_p20210612-r1
Alpine 3.15ncurses6.3_p20211120-r1
Alpine 3.16ncurses6.3_p20220416-r0
Alpine 3.17ncurses6.3_p20220416-r0
Alpine 3.18ncurses6.3_p20220416-r0
Alpine 3.19ncurses6.3_p20220416-r0
Alpine 3.20ncurses6.3_p20220416-r0
Alpine 3.21ncurses6.3_p20220416-r0
Alpine 3.22ncurses6.3_p20220416-r0
Alpine 3.23ncurses6.3_p20220416-r0
Alpine 3.24ncurses6.3_p20220416-r0
Amazon Linux 2ncurses6.0-8.20170212.amzn2.1.4
Amazon Linux 2ncurses-base6.0-8.20170212.amzn2.1.4
Amazon Linux 2ncurses-c++-libs6.0-8.20170212.amzn2.1.4
Amazon Linux 2ncurses-compat-libs6.0-8.20170212.amzn2.1.4
Amazon Linux 2ncurses-devel6.0-8.20170212.amzn2.1.4
Amazon Linux 2ncurses-libs6.0-8.20170212.amzn2.1.4
Amazon Linux 2ncurses-static6.0-8.20170212.amzn2.1.4
Amazon Linux 2ncurses-term6.0-8.20170212.amzn2.1.4
Amazon Linux 2023ncurses6.2-4.20200222.amzn2023.0.3
Amazon Linux 2023ncurses-base6.2-4.20200222.amzn2023.0.3
Amazon Linux 2023ncurses-c++-libs6.2-4.20200222.amzn2023.0.3
Amazon Linux 2023ncurses-compat-libs6.2-4.20200222.amzn2023.0.3
Amazon Linux 2023ncurses-devel6.2-4.20200222.amzn2023.0.3
Amazon Linux 2023ncurses-libs6.2-4.20200222.amzn2023.0.3
Amazon Linux 2023ncurses-static6.2-4.20200222.amzn2023.0.3
Amazon Linux 2023ncurses-term6.2-4.20200222.amzn2023.0.3
Chainguardncurses0
Debian 10ncurses6.1+20181013-2+deb10u3
Debian 12ncurses6.3+20220423-1
Debian 13ncurses6.3+20220423-1
Debian 14ncurses6.3+20220423-1
Red Hat Enterprise Linux 9ncurses0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-base0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-c++-libs0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-c++-libs-debuginfo0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-compat-libs-debuginfo0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-debuginfo0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-debugsource0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-devel0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-libs0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-libs-debuginfo0:6.2-10.20210508.el9_6.2
Red Hat Enterprise Linux 9ncurses-term0:6.2-10.20210508.el9_6.2
Red Hat rhel e4s 9.0ncurses0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-base0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-c++-libs0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-c++-libs-debuginfo0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-compat-libs-debuginfo0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-debuginfo0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-debugsource0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-devel0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-libs0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-libs-debuginfo0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.0ncurses-term0:6.2-8.20210508.el9_0.1
Red Hat rhel e4s 9.2ncurses0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-base0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-c++-libs0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-c++-libs-debuginfo0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-compat-libs-debuginfo0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-debuginfo0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-debugsource0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-devel0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-libs0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-libs-debuginfo0:6.2-8.20210508.el9_2.2
Red Hat rhel e4s 9.2ncurses-term0:6.2-8.20210508.el9_2.2
Red Hat rhel eus 9.4ncurses0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-base0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-c++-libs0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-c++-libs-debuginfo0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-compat-libs-debuginfo0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-debuginfo0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-debugsource0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-devel0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-libs0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-libs-debuginfo0:6.2-10.20210508.el9_4.1
Red Hat rhel eus 9.4ncurses-term0:6.2-10.20210508.el9_4.1
Rocky Linux 9ncurses0:6.2-10.20210508.el9_6.2
SUSE Linux Enterprise Micro 5.1ncurses6.1-150000.5.12.1
SUSE Linux Enterprise Micro 5.2ncurses6.1-150000.5.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP3ncurses6.1-150000.5.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP4ncurses6.1-150000.5.12.1
SUSE Linux Enterprise Module for Development Tools 15 SP3ncurses6.1-150000.5.12.1
SUSE Linux Enterprise Module for Development Tools 15 SP4ncurses6.1-150000.5.12.1
SUSE Linux Enterprise Module for Legacy 15 SP3ncurses6.1-150000.5.12.1
SUSE Linux Enterprise Module for Legacy 15 SP4ncurses6.1-150000.5.12.1
SUSE Linux Enterprise Server 12 SP5ncurses5.9-78.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5ncurses5.9-78.1
SUSE Linux Enterprise Software Development Kit 12 SP5ncurses5.9-78.1
Ubuntu 18.04 LTSncurses6.1-1ubuntu1.18.04.1
Ubuntu 20.04 LTSncurses6.2-0ubuntu2.1
Ubuntu 22.04 LTSncurses6.3-2ubuntu0.1
Ubuntu Pro 14.04 LTSncurses5.9+20140118-1ubuntu1+esm3
Ubuntu Pro 14.04 LTSncurses5.9+20140118-1ubuntu1+esm2
Ubuntu Pro 16.04 LTSncurses6.0+20160213-1ubuntu1+esm2
Ubuntu Pro 16.04 LTSncurses6.0+20160213-1ubuntu1+esm3
Wolfincurses0
openSUSE Leap 15.3ncurses6.1-150000.5.12.1
openSUSE Leap 15.4ncurses6.1-150000.5.12.1
openSUSE Leap Micro 5.2ncurses6.1-150000.5.12.1