【漏洞】【master】 CVE-2023-29491

一、漏洞信息
漏洞编号: [CVE-2023-29491](https://nvd.nist.gov/vuln/detail/CVE-2023-29491)
漏洞归属组件: ncurses
漏洞归属版本: 6.3
CVSS V3.0分值: 
BaseScore: 7.8 高危
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞简述: ncurses是一个字符终端处理库，它能够提供一系列函数以供用户调用并生成基于文本的用户界面。
ncurses 6.4 20230408之前版本存在安全漏洞。攻击者利用该漏洞导致内存损坏。
漏洞公开时间: 
漏洞创建时间: 2023-09-28 13:05:59
漏洞详情参考链接: https://nvd.nist.gov/vuln/detail/CVE-2023-29491
<details><summary>更多参考(点击展开)</summary>

|链接地址|
|--|
|http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56|
|https://www.openwall.com/lists/oss-security/2023/04/12/5|
|https://www.openwall.com/lists/oss-security/2023/04/13/4|
|https://cxsecurity.com/cveshow/CVE-2023-29491/|
|http://www.openwall.com/lists/oss-security/2023/04/19/10|
|http://www.openwall.com/lists/oss-security/2023/04/19/11|
|https://github.com/advisories/GHSA-vh2x-5rx6-qqhv|
|https://www.openwall.com/lists/oss-security/2023/04/19/11|
|https://www.openwall.com/lists/oss-security/2023/04/13/4|
|https://www.openwall.com/lists/oss-security/2023/04/12/5|
|https://www.openwall.com/lists/oss-security/2023/04/19/10|
|http://www.openwall.com/lists/oss-security/2023/04/19/11|
|http://www.openwall.com/lists/oss-security/2023/04/19/10|
|https://security.netapp.com/advisory/ntap-20230517-0009/|
|https://www.auscert.org.au/bulletins/ESB-2023.3001|
</details>

漏洞分析指导链接: 
漏洞数据来源: 
其他: 
漏洞补丁信息: 
<details><summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 来源 |
|------|------|------|----|
|ncurses||||
</details>

二、漏洞分析结构反馈
影响性分析说明: 
Vulnerability Summary for CVE-2023-29491
openHarmony评分: 
受影响版本排查(受影响/不受影响): 
1.OpenHarmony-3.2-Release: 
2.master: 
三、漏洞修复
安全公告链接:

OpenHarmony/third_party_ncurses

内容风险标识

评论 (1)

OpenHarmony/third_party_ncurses .gitee-modal { width: 500px !important; }

内容风险标识