According to the version of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Stack-based buffer overflow in the _nc_write_entry     function in tinfo/write_entry.c in ncurses 6.0 allows     attackers to cause a denial of service (application     crash) or possibly execute arbitrary code via a crafted     terminfo file, as demonstrated by tic.(CVE-2017-16879)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of [apr,ncurses] packages for PhotonOS has been released.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5477-1 advisory.

    Hosein Askari discovered that ncurses was incorrectly performing memory management operations when dealing     with long filenames while writing structures into the file system. An attacker could possibly use this     issue to cause a denial of service or execute arbitrary code. (CVE-2017-16879)

    Chung-Yi Lin discovered that ncurses was incorrectly handling access to invalid memory areas when parsing     terminfo or termcap entries where the use-name had invalid syntax. An attacker could possibly use this     issue to cause a denial of service. (CVE-2018-19211)

    It was discovered that ncurses was incorrectly performing bounds checks when processing invalid hashcodes.
    An attacker could possibly use this issue to cause a denial of service or to expose sensitive information.
    (CVE-2019-17594)

    It was discovered that ncurses was incorrectly handling end-of-string characters when processing terminfo     and termcap files. An attacker could possibly use this issue to cause a denial of service or to expose     sensitive information. (CVE-2019-17595)

    It was discovered that ncurses was incorrectly handling end-of-string characters when converting between     termcap and terminfo formats. An attacker could possibly use this issue to cause a denial of service or     execute arbitrary code. (CVE-2021-39537)

    It was discovered that ncurses was incorrectly performing bounds checks when dealing with corrupt terminfo     data while reading a terminfo file. An attacker could possibly use this issue to cause a denial of service     or to expose sensitive information. (CVE-2022-29458)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the ncurses package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows     attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a     crafted terminfo file, as demonstrated by tic. (CVE-2017-16879)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote NewStart CGSL host, running version MAIN 6.06, has ncurses packages installed that are affected by multiple vulnerabilities:

  - In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will     lead to a remote arbitrary code execution attack. (CVE-2017-10685)

  - In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will     lead to a remote arbitrary code execution attack. (CVE-2017-10684)

  - In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11112)

  - In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11113)

  - There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A     crafted input will lead to a remote denial of service attack. (CVE-2017-13728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ncurses fixes the following issues: Security issues fixed :

  - CVE-2017-13728: Fix infinite loop in the next_char     function in comp_scan.c (bsc#1056136).

  - CVE-2017-13729: Fix illegal address access in the
    _nc_save_str (bsc#1056132).

  - CVE-2017-13730: Fix illegal address access in the     function _nc_read_entry_source() (bsc#1056131).

  - CVE-2017-13731: Fix illegal address access in the     function postprocess_termcap() (bsc#1056129).

  - CVE-2017-13732: Fix illegal address access in the     function dump_uses() (bsc#1056128).

  - CVE-2017-13733: Fix illegal address access in the     fmt_entry function (bsc#1056127).

  - CVE-2017-16879: Fix stack-based buffer overflow in the
    _nc_write_entry() function (bsc#1069530).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201804-13 (ncurses: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ncurses. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing the user to process untrusted terminfo or       other data, could execute arbitrary code or cause a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

An update of 'linux', 'krb5', 'subversion', 'apr', 'ncurses' packages of Photon OS has been released.

The remote NewStart CGSL host, running version MAIN 6.06 (SP), has ncurses packages installed that are affected by multiple vulnerabilities:

  - In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will     lead to a remote arbitrary code execution attack. (CVE-2017-10685)

  - In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will     lead to a remote arbitrary code execution attack. (CVE-2017-10684)

  - In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11112)

  - In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11113)

  - There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A     crafted input will lead to a remote denial of service attack. (CVE-2017-13728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
106146	EulerOS 2.0 SP1 : ncurses (EulerOS-SA-2018-1005)	Nessus	Huawei Local Security Checks	1/19/2018	11/3/2025	high
111902	Photon OS 2.0: Apr / Ncurses PHSA-2017-0053 (deprecated)	Nessus	PhotonOS Local Security Checks	8/17/2018	2/7/2019	high
162173	Ubuntu 16.04 ESM : ncurses vulnerabilities (USN-5477-1)	Nessus	Ubuntu Local Security Checks	6/14/2022	8/28/2024	high
121777	Photon OS 2.0: Ncurses PHSA-2017-0053	Nessus	PhotonOS Local Security Checks	2/7/2019	7/22/2024	high
121781	Photon OS 1.0: Ncurses PHSA-2017-1.0-0093	Nessus	PhotonOS Local Security Checks	2/7/2019	7/23/2024	high
220881	Linux Distros Unpatched Vulnerability : CVE-2017-16879	Nessus	Misc.	3/4/2025	9/5/2025	high
266267	NewStart CGSL MAIN 6.06 : ncurses Multiple Vulnerabilities (NS-SA-2025-0223)	Nessus	NewStart CGSL Local Security Checks	9/30/2025	9/30/2025	critical
104993	SUSE SLES11 Security Update : ncurses (SUSE-SU-2017:3183-1)	Nessus	SuSE Local Security Checks	12/4/2017	11/12/2025	high
106147	EulerOS 2.0 SP2 : ncurses (EulerOS-SA-2018-1006)	Nessus	Huawei Local Security Checks	1/19/2018	11/3/2025	high
109097	GLSA-201804-13 : ncurses: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	4/18/2018	10/31/2024	critical
111903	Photon OS 1.0: Apr / Krb5 / Linux / Ncurses / Subversion PHSA-2017-1.0-0093 (deprecated)	Nessus	PhotonOS Local Security Checks	8/17/2018	4/5/2019	critical
301221	NewStart CGSL MAIN 6.06 (SP) : ncurses Multiple Vulnerabilities (NS-SA-2026-0020)	Nessus	NewStart CGSL Local Security Checks	3/6/2026	3/6/2026	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

critical

high

high

critical

critical

critical