Reported

June 15, 2019

Issued

October 1, 2020 (last modified: June 13, 2023)

Package

pancurses (crates.io)

Type

Vulnerability

Aliases

• CVE-2019-15546
• GHSA-m57c-4vvx-gjgq

References

• https://github.com/RustSec/advisory-db/issues/106

CVSS Score

7.5 HIGH

CVSS Details

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality Impact

None

Integrity Impact

High

Availability Impact

None

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Patched

no patched versions

Affected Functions

Version

pancurses::mvprintw

• >=0

pancurses::printw

• >=0

Description

pancurses::mvprintw and pancurses::printw passes a pointer from a rust &str to C, allowing hostile input to execute a format string attack, which trivially allows writing arbitrary data to stack memory.

Advisory available under CC0-1.0 license.