Aller au contenu
en Se connecter
4.8 Moyenne

CVE-2025-6141 A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic

Description

A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.

Produits et versions touchés

Produit Versions touchées Corrigé en
ncurses 6.5-20250322 6.5-20250329
RUGGEDCOM RST2428P 4.0 premières → < 4.0 4.0
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.3 premières → < 3.3 3.3
SCALANCE XCH328 3.3 premières → < 3.3 3.3
SCALANCE XCM324 3.3 premières → < 3.3 3.3
SCALANCE XCM328 3.3 premières → < 3.3 3.3
SCALANCE XCM332 3.3 premières → < 3.3 3.3
SCALANCE XRH334 (24 V DC, 8xFO, CC) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (230 V AC, 12xFO) 3.3 premières → < 3.3 3.3
Afficher les 8 autres branches
Produit Versions touchées Corrigé en
SCALANCE XRM334 (230 V AC, 8xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (24 V DC, 12xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (24 V DC, 8xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (2x230 V AC, 12xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (2x230 V AC, 8xFO) 3.3 premières → < 3.3 3.3
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 premières → < 3.3 3.3

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de ncurses

Les 2 CVE de ncurses →
CVE-2025-69720 The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in… 7.3 Élevée
Suivre cette CVE