CVE-2017-13731

MediumCVSS 6.5

Published: 29/08/2017(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.91%

86th percentile - higher than 86% of all known CVEs

Summary

An illegal memory access was found in ncurses 6.0 in the postprocess_termcap() function in parse_entry.c, leading to a remote denial of service attack.

Risk Assessment

An attacker can remotely crash applications using ncurses, causing service disruption.

Recommendation

Update ncurses to the latest version that includes fixes for these memory bugs.

Original NVD description (English source)

There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack.