DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat
  • Openshift

No data.

Package CPE Advisory Released Date
Red Hat OpenShift Container Platform 4.16
rhcos-416.94.202408062045-0 cpe:/a:redhat:openshift:4.16::el9 RHSA-2024:5107 2024-08-13T00:00:00Z
References
Link Providers
https://lists.gnu.org/archive/html/bug-ncurses/2023-06/msg00005.html cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-45918 cve-icon
https://security.netapp.com/advisory/ntap-20240315-0006/ cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-45918 cve-icon
History

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}

Thu, 21 Nov 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 21 Nov 2024 20:45:00 +0000

Type Values Removed Values Added
Description ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c. NOTE: Multiple third parties have disputed this indicating upstream does not regard it as a security issue. DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Thu, 31 Oct 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Mon, 28 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 28 Oct 2024 21:00:00 +0000

Type Values Removed Values Added
Description ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c. ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c. NOTE: Multiple third parties have disputed this indicating upstream does not regard it as a security issue.
References

Tue, 13 Aug 2024 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat openshift
CPEs cpe:/a:redhat:openshift:4.16::el9
Vendors & Products Redhat
Redhat openshift
cve-icon MITRE

Status: REJECTED

Assigner: mitre

Published: 2024-02-16T00:00:00

Updated: 2024-11-21T20:25:34.899894

Reserved: 2023-10-16T00:00:00

Link: CVE-2023-45918

cve-icon Vulnrichment

Updated:

cve-icon NVD

Status : Rejected

Published: 2024-02-16T22:15:07.880

Modified: 2024-11-21T21:15:10.630

Link: CVE-2023-45918

cve-icon Redhat

Severity : Low

Publid Date: 2024-01-26T00:00:00Z

Links: CVE-2023-45918 - Bugzilla