CVE-2023-45929: 
Homebrew vulnerability analysis and mitigation

S-Lang 2.3.2 contains a segmentation fault vulnerability in the fixup_tgetstr() function. The vulnerability was discovered in July 2023 and was assigned CVE-2023-45929. The issue affects the S-Lang library, which is used by various applications including the Midnight Commander (mc) file manager (Slang Users, Full Disclosure).

The vulnerability is classified as a Buffer Copy without Checking Size of Input (Classic Buffer Overflow) with a CVSS v3.1 base score of 9.1 (CRITICAL). The vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H, indicating network accessibility, low attack complexity, no privileges required, and no user interaction needed (NVD).

When exploited, the vulnerability results in a segmentation fault in the application using the S-Lang library. The issue was initially discovered while running the Midnight Commander (mc) application on Ubuntu 22.04, where it caused a crash in the fixup_tgetstr function (Slang Users).

The vulnerability can be triggered through the fixup_tgetstr() function when processing terminal information. A proof-of-concept was demonstrated using a specially crafted terminfo file placed in ~/.terminfo/x/ directory (Slang Users).

As of March 2024, the vulnerability is still under evaluation for various Ubuntu releases including 24.04 LTS, 22.04 LTS, 20.04 LTS, and 18.04 LTS. No official fixes have been released yet (Ubuntu).