CVE-2023-45918

Name of the Vulnerable Software and Affected Versions ncurses version 6.4-20230610

Description The issue is related to a NULL pointer dereference in the tgetstr function within the tinfo/lib termcap.c component of the ncurses library, which is used for terminal input-output management. This could potentially allow an attacker to cause a denial of service. However, it's noted that multiple third parties have disputed this as a security issue, indicating that the upstream does not regard it as such.

Recommendations For ncurses version 6.4-20230610, consider disabling the tgetstr function in tinfo/lib termcap.c as a temporary workaround until further guidance is available. At the moment, there is no information about a newer version that contains a fix for this issue.