USN-6099-1: ncurses vulnerabilities
23 May 2023
Several security issues were fixed in ncurses.
Releases
- Ubuntu 23.04
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- ncurses - shared libraries for terminal handling
Details
It was discovered that ncurses was incorrectly performing bounds
checks when processing invalid hashcodes. An attacker could possibly
use this issue to cause a denial of service or to expose sensitive
information. This issue only affected Ubuntu 18.04 LTS.
(CVE-2019-17594)
It was discovered that ncurses was incorrectly handling
end-of-string characters when processing terminfo and termcap files.
An attacker could possibly use this issue to cause a denial of
service or to expose sensitive information. This issue only affected
Ubuntu 18.04 LTS. (CVE-2019-17595)
It was discovered that ncurses was incorrectly handling
end-of-string characters when converting between termcap and
terminfo formats. An attacker could possibly use this issue to cause
a denial of service or execute arbitrary code. This issue only
affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-39537)
It was discovered that ncurses was incorrectly performing bounds
checks when dealing with corrupt terminfo data while reading a
terminfo file. An attacker could possibly use this issue to cause a
denial of service or to expose sensitive information. This issue only
affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
(CVE-2022-29458)
It was discovered that ncurses was parsing environment variables when
running with setuid applications and not properly handling the
processing of malformed data when doing so. A local attacker could
possibly use this issue to cause a denial of service (application
crash) or execute arbitrary code. (CVE-2023-29491)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.04
-
lib32ncursesw6
-
6.4-2ubuntu0.1
-
libncursesw5
-
6.4-2ubuntu0.1
-
libtinfo5
-
6.4-2ubuntu0.1
-
libtinfo6
-
6.4-2ubuntu0.1
-
lib32tinfo6
-
6.4-2ubuntu0.1
-
lib32ncurses6
-
6.4-2ubuntu0.1
-
ncurses-bin
-
6.4-2ubuntu0.1
-
lib64tinfo6
-
6.4-2ubuntu0.1
-
lib64ncurses6
-
6.4-2ubuntu0.1
-
libncurses6
-
6.4-2ubuntu0.1
-
libncurses5
-
6.4-2ubuntu0.1
-
libncursesw6
-
6.4-2ubuntu0.1
-
lib64ncursesw6
-
6.4-2ubuntu0.1
Ubuntu 22.10
-
lib32ncursesw6
-
6.3+20220423-2ubuntu0.1
-
libncursesw5
-
6.3+20220423-2ubuntu0.1
-
libtinfo5
-
6.3+20220423-2ubuntu0.1
-
libtinfo6
-
6.3+20220423-2ubuntu0.1
-
lib32tinfo6
-
6.3+20220423-2ubuntu0.1
-
lib32ncurses6
-
6.3+20220423-2ubuntu0.1
-
ncurses-bin
-
6.3+20220423-2ubuntu0.1
-
lib64tinfo6
-
6.3+20220423-2ubuntu0.1
-
lib64ncurses6
-
6.3+20220423-2ubuntu0.1
-
libncurses6
-
6.3+20220423-2ubuntu0.1
-
libncurses5
-
6.3+20220423-2ubuntu0.1
-
libncursesw6
-
6.3+20220423-2ubuntu0.1
-
lib64ncursesw6
-
6.3+20220423-2ubuntu0.1
Ubuntu 22.04
-
lib32ncursesw6
-
6.3-2ubuntu0.1
-
libncursesw5
-
6.3-2ubuntu0.1
-
libtinfo5
-
6.3-2ubuntu0.1
-
libtinfo6
-
6.3-2ubuntu0.1
-
lib32tinfo6
-
6.3-2ubuntu0.1
-
lib32ncurses6
-
6.3-2ubuntu0.1
-
ncurses-bin
-
6.3-2ubuntu0.1
-
lib64tinfo6
-
6.3-2ubuntu0.1
-
lib64ncurses6
-
6.3-2ubuntu0.1
-
libncurses6
-
6.3-2ubuntu0.1
-
libncurses5
-
6.3-2ubuntu0.1
-
libncursesw6
-
6.3-2ubuntu0.1
-
lib64ncursesw6
-
6.3-2ubuntu0.1
Ubuntu 20.04
-
lib32ncursesw6
-
6.2-0ubuntu2.1
-
libncursesw5
-
6.2-0ubuntu2.1
-
libtinfo5
-
6.2-0ubuntu2.1
-
libtinfo6
-
6.2-0ubuntu2.1
-
lib32tinfo6
-
6.2-0ubuntu2.1
-
lib32ncurses6
-
6.2-0ubuntu2.1
-
ncurses-bin
-
6.2-0ubuntu2.1
-
lib64tinfo6
-
6.2-0ubuntu2.1
-
lib64ncurses6
-
6.2-0ubuntu2.1
-
libncurses6
-
6.2-0ubuntu2.1
-
libncurses5
-
6.2-0ubuntu2.1
-
libncursesw6
-
6.2-0ubuntu2.1
-
lib64ncursesw6
-
6.2-0ubuntu2.1
Ubuntu 18.04
-
libx32ncurses5
-
6.1-1ubuntu1.18.04.1
-
ncurses-bin
-
6.1-1ubuntu1.18.04.1
-
lib32ncursesw5
-
6.1-1ubuntu1.18.04.1
-
lib32tinfo5
-
6.1-1ubuntu1.18.04.1
-
libtinfo5
-
6.1-1ubuntu1.18.04.1
-
lib32ncurses5
-
6.1-1ubuntu1.18.04.1
-
lib64tinfo5
-
6.1-1ubuntu1.18.04.1
-
lib64ncurses5
-
6.1-1ubuntu1.18.04.1
-
libncurses5
-
6.1-1ubuntu1.18.04.1
-
libncursesw5
-
6.1-1ubuntu1.18.04.1
-
libx32ncursesw5
-
6.1-1ubuntu1.18.04.1
-
libx32tinfo5
-
6.1-1ubuntu1.18.04.1
Ubuntu 16.04
-
libx32ncurses5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
ncurses-bin
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib32ncursesw5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib32tinfo5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
libtinfo5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib32ncurses5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib64tinfo5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib64ncurses5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
libncurses5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
libncursesw5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
libx32ncursesw5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
-
libx32tinfo5
-
6.0+20160213-1ubuntu1+esm3
Available with Ubuntu Pro
Ubuntu 14.04
-
libx32ncurses5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
ncurses-bin
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib32ncursesw5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib32tinfo5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
libtinfo5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib32ncurses5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib64tinfo5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
lib64ncurses5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
libncurses5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
libncursesw5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
libx32ncursesw5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
-
libx32tinfo5
-
5.9+20140118-1ubuntu1+esm3
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
Related notices
- USN-5477-1: lib32tinfo-dev, lib32ncurses5-dev, lib64tinfo5, libx32ncursesw5, libx32tinfo-dev, ncurses, libx32tinfo5, ncurses-base, lib32ncurses5, libtinfo5, lib64ncurses5, libncurses5, libtinfo-dev, libncursesw5-dev, libx32ncursesw5-dev, libx32ncurses5-dev, lib32ncursesw5-dev, ncurses-term, lib64ncurses5-dev, libncurses5-dev, libncursesw5, libx32ncurses5, lib32tinfo5, ncurses-examples, ncurses-bin, ncurses-doc, lib32ncursesw5