5.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2023-45918

CVE-2023-45918: ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.

ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2023-45918

CVE-2023-45918:

5.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis is based on the detailed bug report which includes a GDB backtrace pointing directly to tgetstr_sp in tinfo/lib_termcap.c as the location of the NULL pointer dereference. The report also implicates tgetstr (as the public API) and convert_strings as the function that likely creates the NULL value in the ext_Names array due to a corrupted terminfo file. The vulnerability occurs when tgetstr or its internal counterpart tgetstr_sp attempts to use this NULL value. The file path is consistently mentioned as tinfo/lib_termcap.c. The function convert_strings is also included with medium confidence as it contributes to the vulnerable state, although it's not the function where the crash occurs directly. Since no commit information was available, the analysis relies on the provided URLs and their content, particularly the bug report which gives specific function names and file paths involved in the crash. The confidence for tgetstr and tgetstr_sp is high due to their direct mention in the crash context, while convert_strings is medium as its role is inferred from the description of how the NULL pointer is introduced. The output format is adjusted to match the required JSON structure, including confidence levels and explanations for each function's vulnerability. The patch_evidence field refers to the specific parts of the bug report that support the identification of each function. The overall reasoning summarizes this process and the reliance on the bug report in the absence of commit data. The function convert_strings was removed from the final list as the prompt asks for functions that would appear in a runtime profile when the vulnerability is triggered or exploited. While convert_strings sets up the condition, tgetstr and tgetstr_sp are the ones directly involved in the crash during exploitation/triggering.

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.