CVE-2020-19188

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

https://github.com/l3montree-dev/devguard-action/issues/103

Fixed

MEDIUM (4.1)

System detected CVE-2020-19188 with a risk of 2.17
main
T
Tim Bastin detected CVE-2020-19188 with a risk of 2.17
0.11.1
T
Tim Bastin detected CVE-2020-19188 with a risk of 2.17
feautre/sarif-sbom-upload-actions
System created a ticket for CVE-2020-19188
main
Everything after this entry will be synced with the external system. The ticket can be found at https://github.com/l3montree-dev/devguard-action/issues/103
T
Tim Bastin detected CVE-2020-19188 with a risk of 2.17
fix/default-branche
T
Tim Bastin fixed CVE-2020-19188
main
S
Sebastian Kawelke updated the risk assessment from 2.17 to 3.84
0.11.1
Confidentiality Requirement updated: high -> low, Availability Requirement updated: low -> high
S
Sebastian Kawelke updated the risk assessment from 2.17 to 3.84
fix/default-branche
Confidentiality Requirement updated: high -> low, Availability Requirement updated: low -> high
S
Sebastian Kawelke updated the risk assessment from 2.17 to 3.84
attest
Confidentiality Requirement updated: high -> low, Availability Requirement updated: low -> high
S
Sebastian Kawelke updated the risk assessment from 2.17 to 3.84
main
Confidentiality Requirement updated: high -> low, Availability Requirement updated: low -> high
S
Sebastian Kawelke updated the risk assessment from 2.17 to 3.84
feautre/sarif-sbom-upload-actions
Confidentiality Requirement updated: high -> low, Availability Requirement updated: low -> high
S
Sebastian Kawelke updated the risk assessment from 2.17 to 3.84
144-slugify-url-variables-in-the------------attest-job
Confidentiality Requirement updated: high -> low, Availability Requirement updated: low -> high
S
Sebastian Kawelke updated the risk assessment from 2.17 to 3.84
attesting
Confidentiality Requirement updated: high -> low, Availability Requirement updated: low -> high
S
Sebastian Kawelke updated the risk assessment from 2.17 to 3.84
146-test-auto--/m-atic-cr/eation-of-github-branches
Confidentiality Requirement updated: high -> low, Availability Requirement updated: low -> high
System
main
System updated the risk assessment from 3.84 to 4.03
main
System recalculated raw risk assessment
System fixed CVE-2020-19188
main
System updated the risk assessment from 4.03 to 4.06
main
System recalculated raw risk assessment

Reopen this vulnerability

Comment will be synced with https://github.com/l3montree-dev/devguard-action/issues/103

Last calculated at:

Affected component

debian/ncurses

Installed version:

6.4

Fixed in:

6.1+20191019-1

Show in dependency graph

🛡️ DevGuard
Group
/🧩 DevGuard Action
Repository

CVE-2020-19188

Reopen this vulnerability

Affected component

Management decisions across the organization