CVE-2021-39537
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-39537
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-39537.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-39537
- Related
- Published
- 2021-09-20T16:15:12Z
- Modified
- 2024-08-01T08:26:33.259020Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow.
- References
-
- https://lists.gnu.org/archive/html/bug-ncurses/2020-08/msg00006.html
- https://lists.gnu.org/archive/html/bug-ncurses/2021-10/msg00023.html
- https://security.netapp.com/advisory/ntap-20230427-0012/
- http://seclists.org/fulldisclosure/2022/Oct/28
- http://seclists.org/fulldisclosure/2022/Oct/41
- http://seclists.org/fulldisclosure/2022/Oct/43
- http://seclists.org/fulldisclosure/2022/Oct/45
- http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/devel/ncurses/patches/patch-ncurses_tinfo_captoinfo.c?rev=1.1&content-type=text/x-cvsweb-markup
- https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html
- https://support.apple.com/kb/HT213443
- https://support.apple.com/kb/HT213444
- https://support.apple.com/kb/HT213488
- https://security.alpinelinux.org/vuln/CVE-2021-39537
- https://security-tracker.debian.org/tracker/CVE-2021-39537
Affected packages
Alpine:v3.12 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:apk/alpine/ncurses?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.2_p20200523-r1
Affected versions
5.*
5.6-r0
5.7-r0
5.7-r1
5.7-r2
5.7-r3
5.7-r4
5.8-r0
5.8-r1
5.8-r2
5.9-r0
5.9-r1
5.9-r2
5.9-r3
5.9-r4
6.*
6.0-r0
6.0-r1
6.0-r2
6.0-r3
6.0-r4
6.0-r5
6.0-r6
6.0-r7
6.0_p20170701-r0
6.0_p20170701-r1
6.0_p20170930-r0
6.0_p20171125-r0
6.0_p20180121-r0
6.0_p20180121-r1
6.1-r0
6.1_p20180818-r0
6.1_p20180818-r1
6.1_p20190105-r0
6.1_p20190420-r0
6.1_p20190518-r0
6.1_p20190817-r0
6.1_p20190831-r0
6.1_p20190914-r0
6.1_p20191005-r0
6.1_p20191012-r0
6.1_p20191019-r0
6.1_p20191116-r0
6.1_p20191123-r0
6.1_p20191130-r0
6.1_p20191221-r0
6.1_p20191228-r0
6.1_p20200104-r0
6.1_p20200111-r0
6.1_p20200118-r0
6.1_p20200118-r1
6.1_p20200118-r2
6.1_p20200118-r3
6.2_p20200222-r0
6.2_p20200229-r0
6.2_p20200301-r0
6.2_p20200308-r0
6.2_p20200314-r0
6.2_p20200321-r0
6.2_p20200328-r0
6.2_p20200404-r0
6.2_p20200411-r0
6.2_p20200418-r0
6.2_p20200425-r0
6.2_p20200425-r2
6.2_p20200502-r2
6.2_p20200509-r0
6.2_p20200516-r0
6.2_p20200523-r0
Alpine:v3.13 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:apk/alpine/ncurses?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.2_p20200530-r0
Affected versions
5.*
5.6-r0
5.7-r0
5.7-r1
5.7-r2
5.7-r3
5.7-r4
5.8-r0
5.8-r1
5.8-r2
5.9-r0
5.9-r1
5.9-r2
5.9-r3
5.9-r4
6.*
6.0-r0
6.0-r1
6.0-r2
6.0-r3
6.0-r4
6.0-r5
6.0-r6
6.0-r7
6.0_p20170701-r0
6.0_p20170701-r1
6.0_p20170930-r0
6.0_p20171125-r0
6.0_p20180121-r0
6.0_p20180121-r1
6.1-r0
6.1_p20180818-r0
6.1_p20180818-r1
6.1_p20190105-r0
6.1_p20190420-r0
6.1_p20190518-r0
6.1_p20190817-r0
6.1_p20190831-r0
6.1_p20190914-r0
6.1_p20191005-r0
6.1_p20191012-r0
6.1_p20191019-r0
6.1_p20191116-r0
6.1_p20191123-r0
6.1_p20191130-r0
6.1_p20191221-r0
6.1_p20191228-r0
6.1_p20200104-r0
6.1_p20200111-r0
6.1_p20200118-r0
6.1_p20200118-r1
6.1_p20200118-r2
6.1_p20200118-r3
6.2_p20200222-r0
6.2_p20200229-r0
6.2_p20200301-r0
6.2_p20200308-r0
6.2_p20200314-r0
6.2_p20200321-r0
6.2_p20200328-r0
6.2_p20200404-r0
6.2_p20200411-r0
6.2_p20200418-r0
6.2_p20200425-r0
6.2_p20200425-r2
6.2_p20200502-r2
6.2_p20200509-r0
6.2_p20200516-r0
6.2_p20200523-r0
Alpine:v3.14 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:apk/alpine/ncurses?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.2_p20200530-r0
Affected versions
5.*
5.6-r0
5.7-r0
5.7-r1
5.7-r2
5.7-r3
5.7-r4
5.8-r0
5.8-r1
5.8-r2
5.9-r0
5.9-r1
5.9-r2
5.9-r3
5.9-r4
6.*
6.0-r0
6.0-r1
6.0-r2
6.0-r3
6.0-r4
6.0-r5
6.0-r6
6.0-r7
6.0_p20170701-r0
6.0_p20170701-r1
6.0_p20170930-r0
6.0_p20171125-r0
6.0_p20180121-r0
6.0_p20180121-r1
6.1-r0
6.1_p20180818-r0
6.1_p20180818-r1
6.1_p20190105-r0
6.1_p20190420-r0
6.1_p20190518-r0
6.1_p20190817-r0
6.1_p20190831-r0
6.1_p20190914-r0
6.1_p20191005-r0
6.1_p20191012-r0
6.1_p20191019-r0
6.1_p20191116-r0
6.1_p20191123-r0
6.1_p20191130-r0
6.1_p20191221-r0
6.1_p20191228-r0
6.1_p20200104-r0
6.1_p20200111-r0
6.1_p20200118-r0
6.1_p20200118-r1
6.1_p20200118-r2
6.1_p20200118-r3
6.2_p20200222-r0
6.2_p20200229-r0
6.2_p20200301-r0
6.2_p20200308-r0
6.2_p20200314-r0
6.2_p20200321-r0
6.2_p20200328-r0
6.2_p20200404-r0
6.2_p20200411-r0
6.2_p20200418-r0
6.2_p20200425-r0
6.2_p20200425-r2
6.2_p20200502-r2
6.2_p20200509-r0
6.2_p20200516-r0
6.2_p20200523-r0
Alpine:v3.15 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:apk/alpine/ncurses?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.2_p20200530-r0
Affected versions
5.*
5.6-r0
5.7-r0
5.7-r1
5.7-r2
5.7-r3
5.7-r4
5.8-r0
5.8-r1
5.8-r2
5.9-r0
5.9-r1
5.9-r2
5.9-r3
5.9-r4
6.*
6.0-r0
6.0-r1
6.0-r2
6.0-r3
6.0-r4
6.0-r5
6.0-r6
6.0-r7
6.0_p20170701-r0
6.0_p20170701-r1
6.0_p20170930-r0
6.0_p20171125-r0
6.0_p20180121-r0
6.0_p20180121-r1
6.1-r0
6.1_p20180818-r0
6.1_p20180818-r1
6.1_p20190105-r0
6.1_p20190420-r0
6.1_p20190518-r0
6.1_p20190817-r0
6.1_p20190831-r0
6.1_p20190914-r0
6.1_p20191005-r0
6.1_p20191012-r0
6.1_p20191019-r0
6.1_p20191116-r0
6.1_p20191123-r0
6.1_p20191130-r0
6.1_p20191221-r0
6.1_p20191228-r0
6.1_p20200104-r0
6.1_p20200111-r0
6.1_p20200118-r0
6.1_p20200118-r1
6.1_p20200118-r2
6.1_p20200118-r3
6.2_p20200222-r0
6.2_p20200229-r0
6.2_p20200301-r0
6.2_p20200308-r0
6.2_p20200314-r0
6.2_p20200321-r0
6.2_p20200328-r0
6.2_p20200404-r0
6.2_p20200411-r0
6.2_p20200418-r0
6.2_p20200425-r0
6.2_p20200425-r2
6.2_p20200502-r2
6.2_p20200509-r0
6.2_p20200516-r0
6.2_p20200523-r0
Alpine:v3.16 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:apk/alpine/ncurses?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.2_p20200530-r0
Affected versions
5.*
5.6-r0
5.7-r0
5.7-r1
5.7-r2
5.7-r3
5.7-r4
5.8-r0
5.8-r1
5.8-r2
5.9-r0
5.9-r1
5.9-r2
5.9-r3
5.9-r4
6.*
6.0-r0
6.0-r1
6.0-r2
6.0-r3
6.0-r4
6.0-r5
6.0-r6
6.0-r7
6.0_p20170701-r0
6.0_p20170701-r1
6.0_p20170930-r0
6.0_p20171125-r0
6.0_p20180121-r0
6.0_p20180121-r1
6.1-r0
6.1_p20180818-r0
6.1_p20180818-r1
6.1_p20190105-r0
6.1_p20190420-r0
6.1_p20190518-r0
6.1_p20190817-r0
6.1_p20190831-r0
6.1_p20190914-r0
6.1_p20191005-r0
6.1_p20191012-r0
6.1_p20191019-r0
6.1_p20191116-r0
6.1_p20191123-r0
6.1_p20191130-r0
6.1_p20191221-r0
6.1_p20191228-r0
6.1_p20200104-r0
6.1_p20200111-r0
6.1_p20200118-r0
6.1_p20200118-r1
6.1_p20200118-r2
6.1_p20200118-r3
6.2_p20200222-r0
6.2_p20200229-r0
6.2_p20200301-r0
6.2_p20200308-r0
6.2_p20200314-r0
6.2_p20200321-r0
6.2_p20200328-r0
6.2_p20200404-r0
6.2_p20200411-r0
6.2_p20200418-r0
6.2_p20200425-r0
6.2_p20200425-r2
6.2_p20200502-r2
6.2_p20200509-r0
6.2_p20200516-r0
6.2_p20200523-r0
Alpine:v3.17 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:apk/alpine/ncurses?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.2_p20200530-r0
Affected versions
5.*
5.6-r0
5.7-r0
5.7-r1
5.7-r2
5.7-r3
5.7-r4
5.8-r0
5.8-r1
5.8-r2
5.9-r0
5.9-r1
5.9-r2
5.9-r3
5.9-r4
6.*
6.0-r0
6.0-r1
6.0-r2
6.0-r3
6.0-r4
6.0-r5
6.0-r6
6.0-r7
6.0_p20170701-r0
6.0_p20170701-r1
6.0_p20170930-r0
6.0_p20171125-r0
6.0_p20180121-r0
6.0_p20180121-r1
6.1-r0
6.1_p20180818-r0
6.1_p20180818-r1
6.1_p20190105-r0
6.1_p20190420-r0
6.1_p20190518-r0
6.1_p20190817-r0
6.1_p20190831-r0
6.1_p20190914-r0
6.1_p20191005-r0
6.1_p20191012-r0
6.1_p20191019-r0
6.1_p20191116-r0
6.1_p20191123-r0
6.1_p20191130-r0
6.1_p20191221-r0
6.1_p20191228-r0
6.1_p20200104-r0
6.1_p20200111-r0
6.1_p20200118-r0
6.1_p20200118-r1
6.1_p20200118-r2
6.1_p20200118-r3
6.2_p20200222-r0
6.2_p20200229-r0
6.2_p20200301-r0
6.2_p20200308-r0
6.2_p20200314-r0
6.2_p20200321-r0
6.2_p20200328-r0
6.2_p20200404-r0
6.2_p20200411-r0
6.2_p20200418-r0
6.2_p20200425-r0
6.2_p20200425-r2
6.2_p20200502-r2
6.2_p20200509-r0
6.2_p20200516-r0
6.2_p20200523-r0
Alpine:v3.18 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:apk/alpine/ncurses?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.2_p20200530-r0
Affected versions
5.*
5.6-r0
5.7-r0
5.7-r1
5.7-r2
5.7-r3
5.7-r4
5.8-r0
5.8-r1
5.8-r2
5.9-r0
5.9-r1
5.9-r2
5.9-r3
5.9-r4
6.*
6.0-r0
6.0-r1
6.0-r2
6.0-r3
6.0-r4
6.0-r5
6.0-r6
6.0-r7
6.0_p20170701-r0
6.0_p20170701-r1
6.0_p20170930-r0
6.0_p20171125-r0
6.0_p20180121-r0
6.0_p20180121-r1
6.1-r0
6.1_p20180818-r0
6.1_p20180818-r1
6.1_p20190105-r0
6.1_p20190420-r0
6.1_p20190518-r0
6.1_p20190817-r0
6.1_p20190831-r0
6.1_p20190914-r0
6.1_p20191005-r0
6.1_p20191012-r0
6.1_p20191019-r0
6.1_p20191116-r0
6.1_p20191123-r0
6.1_p20191130-r0
6.1_p20191221-r0
6.1_p20191228-r0
6.1_p20200104-r0
6.1_p20200111-r0
6.1_p20200118-r0
6.1_p20200118-r1
6.1_p20200118-r2
6.1_p20200118-r3
6.2_p20200222-r0
6.2_p20200229-r0
6.2_p20200301-r0
6.2_p20200308-r0
6.2_p20200314-r0
6.2_p20200321-r0
6.2_p20200328-r0
6.2_p20200404-r0
6.2_p20200411-r0
6.2_p20200418-r0
6.2_p20200425-r0
6.2_p20200425-r2
6.2_p20200502-r2
6.2_p20200509-r0
6.2_p20200516-r0
6.2_p20200523-r0
Alpine:v3.19 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:apk/alpine/ncurses?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.2_p20200530-r0
Affected versions
5.*
5.6-r0
5.7-r0
5.7-r1
5.7-r2
5.7-r3
5.7-r4
5.8-r0
5.8-r1
5.8-r2
5.9-r0
5.9-r1
5.9-r2
5.9-r3
5.9-r4
6.*
6.0-r0
6.0-r1
6.0-r2
6.0-r3
6.0-r4
6.0-r5
6.0-r6
6.0-r7
6.0_p20170701-r0
6.0_p20170701-r1
6.0_p20170930-r0
6.0_p20171125-r0
6.0_p20180121-r0
6.0_p20180121-r1
6.1-r0
6.1_p20180818-r0
6.1_p20180818-r1
6.1_p20190105-r0
6.1_p20190420-r0
6.1_p20190518-r0
6.1_p20190817-r0
6.1_p20190831-r0
6.1_p20190914-r0
6.1_p20191005-r0
6.1_p20191012-r0
6.1_p20191019-r0
6.1_p20191116-r0
6.1_p20191123-r0
6.1_p20191130-r0
6.1_p20191221-r0
6.1_p20191228-r0
6.1_p20200104-r0
6.1_p20200111-r0
6.1_p20200118-r0
6.1_p20200118-r1
6.1_p20200118-r2
6.1_p20200118-r3
6.2_p20200222-r0
6.2_p20200229-r0
6.2_p20200301-r0
6.2_p20200308-r0
6.2_p20200314-r0
6.2_p20200321-r0
6.2_p20200328-r0
6.2_p20200404-r0
6.2_p20200411-r0
6.2_p20200418-r0
6.2_p20200425-r0
6.2_p20200425-r2
6.2_p20200502-r2
6.2_p20200509-r0
6.2_p20200516-r0
6.2_p20200523-r0
Alpine:v3.20 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:apk/alpine/ncurses?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.2_p20200530-r0
Affected versions
5.*
5.6-r0
5.7-r0
5.7-r1
5.7-r2
5.7-r3
5.7-r4
5.8-r0
5.8-r1
5.8-r2
5.9-r0
5.9-r1
5.9-r2
5.9-r3
5.9-r4
6.*
6.0-r0
6.0-r1
6.0-r2
6.0-r3
6.0-r4
6.0-r5
6.0-r6
6.0-r7
6.0_p20170701-r0
6.0_p20170701-r1
6.0_p20170930-r0
6.0_p20171125-r0
6.0_p20180121-r0
6.0_p20180121-r1
6.1-r0
6.1_p20180818-r0
6.1_p20180818-r1
6.1_p20190105-r0
6.1_p20190420-r0
6.1_p20190518-r0
6.1_p20190817-r0
6.1_p20190831-r0
6.1_p20190914-r0
6.1_p20191005-r0
6.1_p20191012-r0
6.1_p20191019-r0
6.1_p20191116-r0
6.1_p20191123-r0
6.1_p20191130-r0
6.1_p20191221-r0
6.1_p20191228-r0
6.1_p20200104-r0
6.1_p20200111-r0
6.1_p20200118-r0
6.1_p20200118-r1
6.1_p20200118-r2
6.1_p20200118-r3
6.2_p20200222-r0
6.2_p20200229-r0
6.2_p20200301-r0
6.2_p20200308-r0
6.2_p20200314-r0
6.2_p20200321-r0
6.2_p20200328-r0
6.2_p20200404-r0
6.2_p20200411-r0
6.2_p20200418-r0
6.2_p20200425-r0
6.2_p20200425-r2
6.2_p20200502-r2
6.2_p20200509-r0
6.2_p20200516-r0
6.2_p20200523-r0
Debian:11 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:deb/debian/ncurses?arch=source
Debian:12 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:deb/debian/ncurses?arch=source
Debian:13 / ncurses
Package
- Name
- ncurses
- Purl
- pkg:deb/debian/ncurses?arch=source