CVE Catalog
CVE-2017-13732
MediumCVSS 6.5Exploitation Probability (EPSS)
High risk2.91%
86th percentile - higher than 86% of all known CVEs
Summary
An illegal memory access was found in ncurses 6.0 in the dump_uses() function in progs/dump_entry.c, potentially leading to a remote denial of service attack.
Risk Assessment
An attacker can remotely crash applications using ncurses, causing service disruption.
Recommendation
Update ncurses to the latest version that includes fixes for these memory bugs.
Original NVD description (English source)
There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.