CVE-2025-69720
Fixed in a distro release EPSS <1%CVSS 7.3
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
Products: GNU ncurses, Siemens RUGGEDCOM RST2428P
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | ncurses-base | 6.4-15.20240127.el10_1 |
| AlmaLinux 10 | ncurses-term | 6.4-15.20240127.el10_1 |
| Debian 12 | ncurses | no fix |
| Debian 13 | ncurses | no fix |
| Debian 14 | ncurses | 6.6+20251231-1 |
| Red Hat Enterprise Linux 10.1 | ncurses | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux 10.1 | ncurses-base | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux 10.1 | ncurses-c++-libs | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux 10.1 | ncurses-c++-libs-debuginfo | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux 10.1 | ncurses-debuginfo | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux 10.1 | ncurses-debugsource | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux 10.1 | ncurses-devel | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux 10.1 | ncurses-libs | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux 10.1 | ncurses-libs-debuginfo | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux 10.1 | ncurses-term | 0:6.4-15.20240127.el10_1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses | 0:6.4-14.20240127.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses-base | 0:6.4-14.20240127.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses-c++-libs | 0:6.4-14.20240127.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses-c++-libs-debuginfo | 0:6.4-14.20240127.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses-debuginfo | 0:6.4-14.20240127.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses-debugsource | 0:6.4-14.20240127.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses-devel | 0:6.4-14.20240127.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses-libs | 0:6.4-14.20240127.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses-libs-debuginfo | 0:6.4-14.20240127.el10_0.1 |
| Red Hat Enterprise Linux eus 10.0 | ncurses-term | 0:6.4-14.20240127.el10_0.1 |
| Red Hat hummingbird 1 | ncurses | 0:6.6-1.1.hum1 |
| Red Hat hummingbird 1 | ncurses-base | 0:6.6-1.1.hum1 |
| Red Hat hummingbird 1 | ncurses-c++-libs | 0:6.6-1.1.hum1 |
| Red Hat hummingbird 1 | ncurses-compat-libs | 0:6.6-1.1.hum1 |
| Red Hat hummingbird 1 | ncurses-devel | 0:6.6-1.1.hum1 |
| Red Hat hummingbird 1 | ncurses-libs | 0:6.6-1.1.hum1 |
| Red Hat hummingbird 1 | ncurses-static | 0:6.6-1.1.hum1 |
| Red Hat hummingbird 1 | ncurses-term | 0:6.6-1.1.hum1 |
| Rocky Linux 10 | ncurses | 0:6.4-15.20240127.el10_1 |
| SUSE Linux Enterprise Micro 5.2 | ncurses | 6.1-150000.5.33.1 |
| SUSE Linux Enterprise Micro 5.3 | ncurses | 6.1-150000.5.33.1 |
| SUSE Linux Enterprise Micro 5.4 | ncurses | 6.1-150000.5.33.1 |
| SUSE Linux Enterprise Micro 5.5 | ncurses | 6.1-150000.5.33.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | ncurses | 6.1-150000.5.33.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | ncurses | 6.1-150000.5.33.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | ncurses | 6.1-150000.5.33.1 |
| SUSE Linux Enterprise Server 16.0 | ncurses | 6.5.20250531-160000.3.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | ncurses | 5.9-91.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | ncurses | 6.5.20250531-160000.3.1 |
| SUSE Linux Micro 6.0 | ncurses | 6.4.20240224-11.1 |
| SUSE Linux Micro 6.1 | ncurses | 6.4.20240224-slfo.1.1_2.1 |
| SUSE Linux Micro 6.2 | ncurses | 6.5.20250531-160000.3.1 |
| Ubuntu 22.04 LTS | ncurses | 6.3-2ubuntu0.2 |
| Ubuntu 24.04 LTS | ncurses | 6.4+20240113-1ubuntu2.1 |
| Ubuntu 25.10 | ncurses | 6.5+20250216-2ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | ncurses | 5.9+20140118-1ubuntu1+esm6 |
| Ubuntu Pro 16.04 LTS | ncurses | 6.0+20160213-1ubuntu1+esm6 |
| Ubuntu Pro 18.04 LTS | ncurses | 6.1-1ubuntu1.18.04.1+esm3 |
| Ubuntu Pro 20.04 LTS | ncurses | 6.2-0ubuntu2.1+esm1 |
| openSUSE Leap 16.0 | ncurses | 6.5.20250531-160000.3.1 |