ncurses-base (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package ncurses-base, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2023-29491 — CVSS 7.8 (high): ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via…
• CVE-2019-17595 — CVSS 5.4 (medium): There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before…
• CVE-2019-17594 — CVSS 5.3 (medium): There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before…