A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This     vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation     leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version     6.5-20250329 is able to address this issue. It is recommended to upgrade the affected     component.(CVE-2025-6141)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization ncurses security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991104 advisory.

    A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This     vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation     leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version     6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This     vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation     leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version     6.5-20250329 is able to address this issue. It is recommended to upgrade the affected     component.(CVE-2025-6141)

Tenable has extracted the preceding description block directly from the EulerOS ncurses security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the ncurses package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This     vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation     leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version     6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.
    (CVE-2025-6141)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
279310	EulerOS Virtualization 2.13.1 : ncurses (EulerOS-SA-2025-2554)	Nessus	Huawei Local Security Checks	medium
279286	EulerOS Virtualization 2.13.0 : ncurses (EulerOS-SA-2025-2589)	Nessus	Huawei Local Security Checks	medium
277882	Unity Linux 20.1070e Security Update: ncurses (UTSA-2025-991104)	Nessus	Unity Linux Local Security Checks	medium
274968	EulerOS 2.0 SP10 : ncurses (EulerOS-SA-2025-2424)	Nessus	Huawei Local Security Checks	medium
274924	EulerOS 2.0 SP12 : ncurses (EulerOS-SA-2025-2368)	Nessus	Huawei Local Security Checks	medium
274889	EulerOS 2.0 SP12 : ncurses (EulerOS-SA-2025-2337)	Nessus	Huawei Local Security Checks	medium
274861	EulerOS 2.0 SP10 : ncurses (EulerOS-SA-2025-2396)	Nessus	Huawei Local Security Checks	medium
271341	EulerOS 2.0 SP13 : ncurses (EulerOS-SA-2025-2272)	Nessus	Huawei Local Security Checks	medium
271330	EulerOS 2.0 SP13 : ncurses (EulerOS-SA-2025-2304)	Nessus	Huawei Local Security Checks	medium
270040	EulerOS 2.0 SP11 : ncurses (EulerOS-SA-2025-2206)	Nessus	Huawei Local Security Checks	medium
270005	EulerOS 2.0 SP11 : ncurses (EulerOS-SA-2025-2238)	Nessus	Huawei Local Security Checks	medium
265432	Photon OS 4.0: Ncurses PHSA-2025-4.0-0871	Nessus	PhotonOS Local Security Checks	medium
265323	Photon OS 5.0: Ncurses PHSA-2025-5.0-0620	Nessus	PhotonOS Local Security Checks	medium
259663	Linux Distros Unpatched Vulnerability : CVE-2025-6141	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-6141

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium