CVE Catalog
CVE-2017-13729
MediumCVSS 6.5Exploitation Probability (EPSS)
High risk2.91%
86th percentile - higher than 86% of all known CVEs
Summary
An illegal memory access was found in ncurses 6.0 in the _nc_save_str function in alloc_entry.c, leading to a remote denial of service attack.
Risk Assessment
An attacker can remotely crash applications using ncurses, causing service disruption.
Recommendation
Update ncurses to the latest version that includes fixes for these memory bugs.
Original NVD description (English source)
There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.