{"id":"RUSTSEC-2019-0006","summary":"Buffer overflow and format vulnerabilities in functions exposed without unsafe","details":"`ncurses` exposes functions from the ncurses library which:\n\n- Pass buffers without length to C functions that may write an arbitrary amount of\n  data, leading to a buffer overflow. (`instr`, `mvwinstr`, etc)\n- Passes rust &str to strings expecting C format arguments, allowing hostile\n  input to execute a format string attack, which trivially allows writing\n  arbitrary data to stack memory (functions in the `printw` family).","aliases":["CVE-2019-15547","CVE-2019-15548","GHSA-32v7-ghpr-c8hg","GHSA-g7r5-x7cr-vm3v"],"modified":"2023-11-08T04:01:13.981343Z","published":"2019-06-15T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/ncurses"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2019-0006.html"},{"type":"REPORT","url":"https://github.com/RustSec/advisory-db/issues/106"}],"affected":[{"package":{"name":"ncurses","ecosystem":"crates.io","purl":"pkg:cargo/ncurses"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":["ncurses::instr","ncurses::mvprintw","ncurses::mvwinstr","ncurses::mvwprintw","ncurses::printw"],"os":[]}},"database_specific":{"categories":[],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2019-0006.json"}}],"schema_version":"1.7.3"}