ID |
CVE-2025-6141
|
Sažetak |
A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component. |
Reference |
|
CVSS |
Base: | 1.7 |
Impact: | 2.9 |
Exploitability: | 3.1 |
|
Pristup |
Vektor | Složenost | Autentikacija |
LOCAL |
LOW |
SINGLE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
NONE |
NONE |
PARTIAL |
|
CVSS vektor |
AV:L/AC:L/Au:S/C:N/I:N/A:P |
Zadnje važnije ažuriranje |
17-06-2025 - 20:50 |
Objavljeno |
16-06-2025 - 22:16 |