CVE-2019-15548: Buffer Overflow
Published Aug 26, 2019
·Updated
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mishandled.
Affected Software
1 affected component
Ncurses Project Ncurses<=5.99.0
Event History
Aug 26, 2019
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15548?
CVE-2019-15548 has been classified as a high severity vulnerability due to potential buffer overflows.
2
How do I fix CVE-2019-15548?
To fix CVE-2019-15548, update the ncurses crate to version 6.0 or later, which includes a patch for this issue.
3
What are the potential impacts of CVE-2019-15548?
The potential impacts of CVE-2019-15548 include application crashes and arbitrary code execution leading to system compromise.
4
Which versions of ncurses are affected by CVE-2019-15548?
CVE-2019-15548 affects all versions of ncurses up to and including 5.99.0.
5
What is the cause of CVE-2019-15548?
CVE-2019-15548 is caused by improper handling of input between the ncurses crate and C functions, leading to buffer overflows.