Back Linuxsecurity

Ubuntu ncurses Important Denial of Service Vuln USN-8709-1 CVE-2025

Linuxsecurity •LinuxSecurity Advisories • September 1, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

ncurses could be made to crash if it opened a specially crafted file. Software Description: - ncurses: shared libraries for terminal handling Details: It was discovered that ncurses incorrectly handled specially crafted terminfo database entries. A local attacker could possibly use this issue to cause applications using ncurses to crash, resulting in a denial of service.

ncurses could be made to crash if it opened a specially crafted file.

Software Description:

- ncurses: shared libraries for terminal handling

It was discovered that ncurses incorrectly handled specially crafted

terminfo database entries. A local attacker could possibly use this issue

to cause applications using ncurses to crash, resulting in a denial of

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS libncurses6 6.4+20240113-1ubuntu2.2 libtinfo6 6.4+20240113-1ubuntu2.2 ncurses-bin 6.4+20240113-1ubuntu2.2 Ubuntu 22.04 LTS libncurses5 6.3-2ubuntu0.3 libncurses6 6.3-2ubuntu0.3 libtinfo5 6.3-2ubuntu0.3 libtinfo6 6.3-2ubuntu0.3 ncurses-bin 6.3-2ubuntu0.3 Ubuntu 20.04 LTS libncurses5 6.2-0ubuntu2.1+esm2 Available with Ubuntu Pro libncurses6 6.2-0ubuntu2.1+esm2 Available with Ubuntu Pro libtinfo5 6.2-0ubuntu2.1+esm2 Available with Ubuntu Pro libtinfo6 6.2-0ubuntu2.1+esm2 Available with Ubuntu Pro ncurses-bin 6.2-0ubuntu2.1+esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS libncurses5 6.1-1ubuntu1.18.04.1+esm4 Available with Ubuntu Pro libtinfo5 6.1-1ubuntu1.18.04.1+esm4 Available with Ubuntu Pro ncurses-bin 6.1-1ubuntu1.18.04.1+esm4 Available with Ubuntu Pro Ubuntu 16.04 LTS libncurses5 6.0+20160213-1ubuntu1+esm7 Available with Ubuntu Pro libtinfo5 6.0+20160213-1ubuntu1+esm7 Available with Ubuntu Pro ncurses-bin 6.0+20160213-1ubuntu1+esm7 Available with Ubuntu Pro Ubuntu 14.04 LTS libncurses5 5.9+20140118-1ubuntu1+esm7 Available with Ubuntu Pro libtinfo5 5.9+20140118-1ubuntu1+esm7 Available with Ubuntu Pro ncurses-bin 5.9+20140118-1ubuntu1+esm7 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8709-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Denial of Service Vulnerability in Ubuntu's ncurses Library A vulnerability in the ncurses library has been identified, allowing local attackers to exploit specially crafted terminfo database entries. This flaw can lead to applications using ncurses crashing, resulting in a denial of service. The affected systems include various versions of Ubuntu, specifically 24.04 LTS, 22.04 LTS, 20.04 LTS, 18.04 LTS, 16.04 LTS, and 14.04 LTS. Users are advised to update to the latest package versions to mitigate the risk. The vulnerability is cataloged as CVE-2025-8709. A standard system update will address this issue across the affected versions. No active exploitation has been reported at this time. 2 sources 46

Extracted Entities

Ubuntu ncurses Important Denial of Service Vuln USN-8709-1 CVE-2025

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (1)