CVE-2021-39537
Summary
| CVE | CVE-2021-39537 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-09-20 16:15:00 UTC |
| Updated | 2023-12-03 20:15:00 UTC |
| Description | An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow. |
Risk And Classification
Problem Types: CWE-787
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Full Disclosure: APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7 | FULLDISC | seclists.org | |
| About the security content of macOS Big Sur 11.7 - Apple Support | CONFIRM | support.apple.com | |
| About the security content of macOS Monterey 12.6 - Apple Support | CONFIRM | support.apple.com | |
| Full Disclosure: APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 | FULLDISC | seclists.org | |
| Re: CVE-2021-39537 | MISC | lists.gnu.org | |
| About the security content of macOS Ventura 13 - Apple Support | CONFIRM | support.apple.com | |
| pkgsrc/devel/ncurses/patches/patch-ncurses_tinfo_captoinfo.c - view - 1.1 | MISC | cvsweb.netbsd.org | |
| [debian-lts-announce] 20231203 [SECURITY] [DLA 3682-1] ncurses security update | lists.debian.org | ||
| Full Disclosure: APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6 | FULLDISC | seclists.org | |
| Full Disclosure: APPLE-SA-2022-10-24-2 macOS Ventura 13 | FULLDISC | seclists.org | |
| CVE-2021-39537 GNU Ncurses Vulnerability in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| A heap-buffer-overflow in captoinfo.c:321:12 | MISC | lists.gnu.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 181569 Debian Security Update for ncurses (CVE-2021-39537)
- 199358 Ubuntu Security Notification for ncurses Vulnerabilities (USN-6099-1)
- 354130 Amazon Linux Security Advisory for ncurses : ALAS2-2022-1893
- 354388 Amazon Linux Security Advisory for ncurses : ALAS2022-2022-217
- 354530 Amazon Linux Security Advisory for ncurses : ALAS-2022-217
- 354584 Amazon Linux Security Advisory for ncurses : ALAS-2022-217
- 355115 Amazon Linux Security Advisory for ncurses : ALAS2023-2023-023
- 500419 Alpine Linux Security Update for ncurses
- 501440 Alpine Linux Security Update for ncurses
- 504176 Alpine Linux Security Update for ncurses
- 6000372 Debian Security Update for ncurses (DLA 3682-1)
- 671146 EulerOS Security Update for ncurses (EulerOS-SA-2021-2806)
- 671167 EulerOS Security Update for ncurses (EulerOS-SA-2021-2925)
- 671169 EulerOS Security Update for ncurses (EulerOS-SA-2021-2917)
- 671276 EulerOS Security Update for ncurses (EulerOS-SA-2022-1229)
- 671301 EulerOS Security Update for ncurses (EulerOS-SA-2022-1210)
- 751262 SUSE Enterprise Linux Security Update for ncurses (SUSE-SU-2021:3491-1)
- 751270 OpenSUSE Security Update for ncurses (openSUSE-SU-2021:3490-1)
- 751302 OpenSUSE Security Update for ncurses (openSUSE-SU-2021:1417-1)
- 900343 Common Base Linux Mariner (CBL-Mariner) Security Update for ncurses (5935)
- 901633 Common Base Linux Mariner (CBL-Mariner) Security Update for ncurses (6740-1)