CVE Catalog

CVE-2017-13730

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.91%

86th percentile - higher than 86% of all known CVEs

Summary

An illegal memory access was found in ncurses 6.0 in the _nc_read_entry_source() function in progs/tic.c, potentially leading to a remote denial of service attack.

Risk Assessment

An attacker can remotely crash applications using ncurses, causing service disruption.

Recommendation

Update ncurses to the latest version that includes fixes for these memory bugs.

Original NVD description (English source)

There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS