Skip to content
fr Sign in
4.8 Medium

CVE-2025-6141 A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic

Description

A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.

Affected products and versions

Product Affected versions Fixed in
ncurses 6.5-20250322 6.5-20250329
RUGGEDCOM RST2428P 4.0 earliest → < 4.0 4.0
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.3 earliest → < 3.3 3.3
SCALANCE XCH328 3.3 earliest → < 3.3 3.3
SCALANCE XCM324 3.3 earliest → < 3.3 3.3
SCALANCE XCM328 3.3 earliest → < 3.3 3.3
SCALANCE XCM332 3.3 earliest → < 3.3 3.3
SCALANCE XRH334 (24 V DC, 8xFO, CC) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (230 V AC, 12xFO) 3.3 earliest → < 3.3 3.3
Show the 8 other branches
Product Affected versions Fixed in
SCALANCE XRM334 (230 V AC, 8xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (24 V DC, 12xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (24 V DC, 8xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (2x230 V AC, 12xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (2x230 V AC, 8xFO) 3.3 earliest → < 3.3 3.3
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 earliest → < 3.3 3.3

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ncurses

The 2 CVEs of ncurses →
CVE-2025-69720 The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in… 7.3 High
Track this CVE