USN-5477-1: ncurses vulnerabilities
23776
25 July 2022
25 July 2022
CLOSED
LOW
CVE-2017-16879,CVE-2018-19211,CVE-2019-17594,CVE-2019-17595,CVE-2021-39537,CVE-2022-29458
Severity
low
Vendor
VMware Tanzu
Versions Affected
- Canonical Ubuntu 16.04
Description
Hosein Askari discovered that ncurses was incorrectly performing memory management operations when dealing with long filenames while writing structures into the file system. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2017-16879) Chung-Yi Lin discovered that ncurses was incorrectly handling access to invalid memory areas when parsing terminfo or termcap entries where the use-name had invalid syntax. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-19211) It was discovered that ncurses was incorrectly performing bounds checks when processing invalid hashcodes. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. (CVE-2019-17594) It was discovered that ncurses was incorrectly handling end-of-string characters when processing terminfo and termcap files. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. (CVE-2019-17595) It was discovered that ncurses was incorrectly handling end-of-string characters when converting between termcap and terminfo formats. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-39537) It was discovered that ncurses was incorrectly performing bounds checks when dealing with corrupt terminfo data while reading a terminfo file. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. (CVE-2022-29458) Update Instructions: Run `sudo ua fix USN-5477-1` to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: libx32ncurses5 - 6.0+20160213-1ubuntu1+esm2 lib32tinfo-dev - 6.0+20160213-1ubuntu1+esm2 ncurses-examples - 6.0+20160213-1ubuntu1+esm2 lib32ncurses5-dev - 6.0+20160213-1ubuntu1+esm2 lib32ncursesw5 - 6.0+20160213-1ubuntu1+esm2 libtinfo-dev - 6.0+20160213-1ubuntu1+esm2 lib32ncursesw5-dev - 6.0+20160213-1ubuntu1+esm2 libncursesw5 - 6.0+20160213-1ubuntu1+esm2 libtinfo5 - 6.0+20160213-1ubuntu1+esm2 lib32ncurses5 - 6.0+20160213-1ubuntu1+esm2 lib64tinfo5 - 6.0+20160213-1ubuntu1+esm2 ncurses-bin - 6.0+20160213-1ubuntu1+esm2 lib64ncurses5 - 6.0+20160213-1ubuntu1+esm2 lib64ncurses5-dev - 6.0+20160213-1ubuntu1+esm2 libncurses5 - 6.0+20160213-1ubuntu1+esm2 libncurses5-dev - 6.0+20160213-1ubuntu1+esm2 libx32ncurses5-dev - 6.0+20160213-1ubuntu1+esm2 lib32tinfo5 - 6.0+20160213-1ubuntu1+esm2 ncurses-base - 6.0+20160213-1ubuntu1+esm2 libx32tinfo-dev - 6.0+20160213-1ubuntu1+esm2 ncurses-doc - 6.0+20160213-1ubuntu1+esm2 libx32ncursesw5 - 6.0+20160213-1ubuntu1+esm2 libx32ncursesw5-dev - 6.0+20160213-1ubuntu1+esm2 libx32tinfo5 - 6.0+20160213-1ubuntu1+esm2 libncursesw5-dev - 6.0+20160213-1ubuntu1+esm2 ncurses-term - 6.0+20160213-1ubuntu1+esm2 Available with UA Infra or UA Desktop: https://ubuntu.com/advantage
CVEs contained in this USN include: CVE-2017-16879, CVE-2018-19211, CVE-2019-17594, CVE-2019-17595, CVE-2021-39537, CVE-2022-29458
Affected VMware Products and Versions
Severity is low unless otherwise noted.
- Tanzu Greenplum for Kubernetes
- All versions prior to 2.0.0
- Isolation Segment
- 2.7.x versions with Xenial Stemcells prior to 456.274
- 2.8.x versions with Xenial Stemcells prior to 621.252
- 2.9.x versions with Xenial Stemcells prior to 621.252
- 2.10.x versions with Xenial Stemcells prior to 621.252
- 2.11.x versions with Xenial Stemcells prior to 621.252
- 2.12.x versions with Xenial Stemcells prior to 621.252
- Operations Manager
- 2.9.x versions prior to 2.9.41
- 2.10.x versions prior to 2.10.44
- VMware Tanzu Application Service for VMs
- 2.7.x versions with Xenial Stemcells prior to 456.274
- 2.8.x versions with Xenial Stemcells prior to 621.252
- 2.9.x versions with Xenial Stemcells prior to 621.252
- 2.10.x versions with Xenial Stemcells prior to 621.252
- 2.11.x versions with Xenial Stemcells prior to 621.252
- 2.12.x versions with Xenial Stemcells prior to 621.252
Mitigation
Users of affected products are strongly encouraged to follow the mitigation below. On the Tanzu Network product page for each release, check the Depends On section and/or Release Notes for this information. Releases that have fixed this issue include:- Tanzu Greenplum for Kubernetes
- 2.0.0
- Isolation Segment
- 2.7.x: Upgrade Xenial Stemcells to 456.274 or greater
- 2.8.x: Upgrade Xenial Stemcells to 621.252 or greater
- 2.9.x: Upgrade Xenial Stemcells to 621.252 or greater
- 2.10.x: Upgrade Xenial Stemcells to 621.252 or greater
- 2.11.x: Upgrade Xenial Stemcells to 621.252 or greater
- 2.12.x: Upgrade Xenial Stemcells to 621.252 or greater
- Operations Manager
- 2.9.41
- 2.10.44
- VMware Tanzu Application Service for VMs
- 2.7.x: Upgrade Xenial Stemcells to 456.274 or greater
- 2.8.x: Upgrade Xenial Stemcells to 621.252 or greater
- 2.9.x: Upgrade Xenial Stemcells to 621.252 or greater
- 2.10.x: Upgrade Xenial Stemcells to 621.252 or greater
- 2.11.x: Upgrade Xenial Stemcells to 621.252 or greater
- 2.12.x: Upgrade Xenial Stemcells to 621.252 or greater
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16879
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19211
- https://ubuntu.com/security/CVE-2019-17594
- https://ubuntu.com/security/CVE-2019-17595
- https://ubuntu.com/security/CVE-2021-39537
- https://ubuntu.com/security/CVE-2022-29458
- https://ubuntu.com/security/notices/USN-5477-1
- https://cloudfoundry.org/blog/usn-5477-1
History
2022-07-25: Initial vulnerability report published.