Out-of-bounds write in ncurses - CVE-2020-19186
Published: December 11, 2023
Vulnerability identifier: #VU84084
CSH Severity: Medium
CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-19186
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error within the _nc_find_entry() function in tinfo/comp_hash.c. A remote attacker can send a specially crafted command to the application, trigger an out-of-bounds write and execute arbitrary code on the target system.
Affected software
ncurses
macOS
IBM Sterling Order Management
Juniper Cloud Native Router
Junos cRPD
macOS
IBM Sterling Order Management
Juniper Cloud Native Router
Junos cRPD
How to mitigate CVE-2020-19186
Install updates from vendor's website.
ncurses - update to 6.2
macOS - addressed in versions 12.7.2 21G1974, 13.6.3 22G436, 14.2 23C64
IBM Sterling Order Management - update to 10.0.2403.1
Juniper Cloud Native Router - update to 23.4R1
Junos cRPD - update to 23.4R1
macOS - addressed in versions 12.7.2 21G1974, 13.6.3 22G436, 14.2 23C64
IBM Sterling Order Management - update to 10.0.2403.1
Juniper Cloud Native Router - update to 23.4R1
Junos cRPD - update to 23.4R1
External References
Related Security Bulletins
- Multiple vulnerabilities in ncurses
- Multiple vulnerabilities in Apple macOS Sonoma
- Multiple vulnerabilities in Apple macOS Ventura
- Multiple vulnerabilities in Apple macOS Monterey
- Multiple vulnerabilities in Juniper Cloud Native Router
- Multiple vulnerabilities in Juniper Networks Junos cRPD
- Multiple vulnerabilities in IBM Sterling Order Management