CVE-2023-50495 - Vulnerability Details - OpenCVE

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Invisible-island	Ncurse

Configuration 1 [-]

cpe:2.3:a:invisible-island:ncurse:6.4-20230418:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html
https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html
https://nvd.nist.gov/vuln/detail/CVE-2023-50495
https://security.netapp.com/advisory/ntap-20240119-0008/
https://www.cve.org/CVERecord?id=CVE-2023-50495

History

Tue, 26 Nov 2024 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-12-12T00:00:00

Updated: 2024-11-26T16:38:01.391Z

Reserved: 2023-12-11T00:00:00

Link: CVE-2023-50495

Vulnrichment

Updated: 2024-08-02T22:16:47.021Z

NVD

Status : Modified

Published: 2023-12-12T15:15:07.867

Modified: 2024-11-21T08:37:04.243

Link: CVE-2023-50495

Redhat

Severity : Low

Publid Date: 2023-12-12T00:00:00Z

Links: CVE-2023-50495 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-50495", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-11-26T16:38:01.391Z", "dateReserved": "2023-12-11T00:00:00", "datePublished": "2023-12-12T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-01-31T03:06:19.751745"}, "descriptions": [{"lang": "en", "value": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html"}, {"url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html"}, {"url": "https://security.netapp.com/advisory/ntap-20240119-0008/"}, {"name": "FEDORA-2024-96090dafaf", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:16:47.021Z"}, "title": "CVE Program Container", "references": [{"url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html", "tags": ["x_transferred"]}, {"url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20240119-0008/", "tags": ["x_transferred"]}, {"name": "FEDORA-2024-96090dafaf", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-26T16:26:51.489855Z", "id": "CVE-2023-50495", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T16:38:01.391Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html", "tags": ["x_transferred"]}, {"url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20240119-0008/", "tags": ["x_transferred"]}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/", "name": "FEDORA-2024-96090dafaf", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:16:47.021Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-50495", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-26T16:26:51.489855Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-26T16:37:35.005Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html"}, {"url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html"}, {"url": "https://security.netapp.com/advisory/ntap-20240119-0008/"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/", "name": "FEDORA-2024-96090dafaf", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-01-31T03:06:19.751745"}}}, "cveMetadata": {"cveId": "CVE-2023-50495", "state": "PUBLISHED", "dateUpdated": "2024-11-26T16:38:01.391Z", "dateReserved": "2023-12-11T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-12-12T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:invisible-island:ncurse:6.4-20230418:*:*:*:*:*:*:*", "matchCriteriaId": "4796E807-08B7-46FD-9BD1-EF727BE6BB58", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}, {"lang": "es", "value": "Se descubri\u00f3 que NCurse v6.4-20230418 conten\u00eda un error de segmentaci\u00f3n a trav\u00e9s del componente _nc_wrap_entry()."}], "id": "CVE-2023-50495", "lastModified": "2024-11-21T08:37:04.243", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-12-12T15:15:07.867", "references": [{"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Patch"], "url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Patch"], "url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html"}, {"source": "cve@mitre.org", "url": "https://security.netapp.com/advisory/ntap-20240119-0008/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch"], "url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch"], "url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20240119-0008/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}