CVE-2020-19188 - Vulnerability Details - OpenCVE

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.07292.

Key SSVC decision points have not yet been added.

Vendors	Products
Gnu	Ncurses
Netapp	Active Iq Unified Manager

Configuration 1 [-]

cpe:2.3:a:gnu:ncurses:6.1:*:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2020-11095	Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://seclists.org/fulldisclosure/2023/Dec/10
http://seclists.org/fulldisclosure/2023/Dec/11
http://seclists.org/fulldisclosure/2023/Dec/9
https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc4.md
https://nvd.nist.gov/vuln/detail/CVE-2020-19188
https://security.netapp.com/advisory/ntap-20231006-0005/
https://support.apple.com/kb/HT214036
https://support.apple.com/kb/HT214037
https://support.apple.com/kb/HT214038
https://www.cve.org/CVERecord?id=CVE-2020-19188

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-08-22T00:00:00

Updated: 2024-08-04T14:08:30.633Z

Reserved: 2020-08-13T00:00:00

Link: CVE-2020-19188

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-08-22T19:16:00.380

Modified: 2024-11-21T05:09:00.790

Link: CVE-2020-19188

Redhat

Severity : Low

Publid Date: 2019-05-03T00:00:00Z

Links: CVE-2020-19188 - Bugzilla

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2020-19188", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-04T14:08:30.633Z", "dateReserved": "2020-08-13T00:00:00", "datePublished": "2023-08-22T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-12-13T01:09:05.672821"}, "descriptions": [{"lang": "en", "value": "Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc4.md"}, {"url": "https://security.netapp.com/advisory/ntap-20231006-0005/"}, {"url": "https://support.apple.com/kb/HT214038"}, {"url": "https://support.apple.com/kb/HT214036"}, {"url": "https://support.apple.com/kb/HT214037"}, {"name": "20231212 APPLE-SA-12-11-2023-4 macOS Sonoma 14.2", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2023/Dec/9"}, {"name": "20231212 APPLE-SA-12-11-2023-5 macOS Ventura 13.6.3", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2023/Dec/10"}, {"name": "20231212 APPLE-SA-12-11-2023-6 macOS Monterey 12.7.2", "tags": ["mailing-list"], "url": "http://seclists.org/fulldisclosure/2023/Dec/11"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T14:08:30.633Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc4.md", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20231006-0005/", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214038", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214036", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214037", "tags": ["x_transferred"]}, {"name": "20231212 APPLE-SA-12-11-2023-4 macOS Sonoma 14.2", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2023/Dec/9"}, {"name": "20231212 APPLE-SA-12-11-2023-5 macOS Ventura 13.6.3", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2023/Dec/10"}, {"name": "20231212 APPLE-SA-12-11-2023-6 macOS Monterey 12.7.2", "tags": ["mailing-list", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2023/Dec/11"}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gnu:ncurses:6.1:*:*:*:*:*:*:*", "matchCriteriaId": "D1F38E3C-7B14-411F-B7F6-32828CD4D56B", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*", "matchCriteriaId": "E8F29E19-3A64-4426-A2AA-F169440267CC", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command."}, {"lang": "es", "value": "La vulnerabilidad de desbordamiento de b\u00fafer en la funci\u00f3n fmt_entry en progs/dump_entry.c:1116 en ncurses v6.1 permite a atacantes remotos causar una denegaci\u00f3n de servicios a trav\u00e9s de un comando manipulado. "}], "id": "CVE-2020-19188", "lastModified": "2024-11-21T05:09:00.790", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-22T19:16:00.380", "references": [{"source": "cve@mitre.org", "url": "http://seclists.org/fulldisclosure/2023/Dec/10"}, {"source": "cve@mitre.org", "url": "http://seclists.org/fulldisclosure/2023/Dec/11"}, {"source": "cve@mitre.org", "url": "http://seclists.org/fulldisclosure/2023/Dec/9"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc4.md"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20231006-0005/"}, {"source": "cve@mitre.org", "url": "https://support.apple.com/kb/HT214036"}, {"source": "cve@mitre.org", "url": "https://support.apple.com/kb/HT214037"}, {"source": "cve@mitre.org", "url": "https://support.apple.com/kb/HT214038"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2023/Dec/10"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2023/Dec/11"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2023/Dec/9"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc4.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20231006-0005/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT214036"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT214037"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT214038"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}