CVE-2019-15548 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Project Ncurses

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents4 sources
Severity
9.8CRITICALNVD
EPSS
0.6%
top 30.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Ncurses Project NcursesGNU Ncurses
Timeline
PublishedAug 26
Latest updateAug 25

Description

An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mishandled.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶crates.iognu/ncurses5.101.0+1

🔴Vulnerability Details

6
OSV
Mishandling of format strings in ncurses↗2021-08-25
▶
GHSA
Buffer overflow and format vulnerabilities in ncurses↗2021-08-25
▶
OSV
Buffer overflow and format vulnerabilities in ncurses↗2021-08-25
▶
OSV
CVE-2019-15548: An issue was discovered in the ncurses crate through 5↗2019-08-26
▶
CVEList
CVE-2019-15548: An issue was discovered in the ncurses crate through 5↗2019-08-26
▶
CVE-2019-15548 — Ncurses Project Ncurses vulnerability | cvebase