Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:ncurses:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductNcurses (75154d04-2754-5378-ab4c-de1c9fca34fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ncurses purl2cpe 2026-06-01 10:11:53.417336
pkg:deb/ubuntu/ncurses purl2cpe 2026-06-01 10:11:53.417337
pkg:github/mitchelhaan/ncurses purl2cpe 2026-06-01 10:11:53.417339
pkg:github/werehamster/ncurses purl2cpe 2026-06-01 10:11:53.417340
pkg:gitlab/redhat/ncurses purl2cpe 2026-06-01 10:11:53.417341
pkg:gnu/ncurses purl2cpe 2026-06-01 10:11:53.417343
pkg:rpm/centos/ncurses purl2cpe 2026-06-01 10:11:53.417344
pkg:rpm/fedora/ncurses purl2cpe 2026-06-01 10:11:53.417345
pkg:rpm/opensuse/ncurses purl2cpe 2026-06-01 10:11:53.417347

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-16879 vulnerable 2026-06-08 05:09:07.497898 Details available
Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic.
Published: 2017-11-22T22:00:00.000Z
Updated: 2024-08-05T20:35:21.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13734 vulnerable 2026-06-08 05:08:48.802652 Details available
There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.
Published: 2017-08-29T06:00:00.000Z
Updated: 2024-08-05T19:05:19.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13733 vulnerable 2026-06-08 05:08:48.802363 Details available
There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
Published: 2017-08-29T06:00:00.000Z
Updated: 2024-08-05T19:05:20.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13732 vulnerable 2026-06-08 05:08:48.802027 Details available
There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
Published: 2017-08-29T06:00:00.000Z
Updated: 2024-08-05T19:05:20.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13731 vulnerable 2026-06-08 05:08:48.801705 Details available
There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack.
Published: 2017-08-29T06:00:00.000Z
Updated: 2024-08-05T19:05:20.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13730 vulnerable 2026-06-08 05:08:48.801366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13729 vulnerable 2026-06-08 05:08:48.801006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13728 vulnerable 2026-06-08 05:08:48.800555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11113 vulnerable 2026-06-08 05:08:36.849287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11112 vulnerable 2026-06-08 05:08:36.848985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10685 vulnerable 2026-06-08 05:08:36.219919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10684 vulnerable 2026-06-08 05:08:36.219540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.