CVE Catalog

CVE-2017-13733

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.73%

85th percentile - higher than 85% of all known CVEs

Summary

An illegal memory access was found in ncurses 6.0 in the fmt_entry function in progs/dump_entry.c, potentially leading to a remote denial of service attack.

Risk Assessment

An attacker can remotely crash applications using ncurses, causing service disruption.

Recommendation

Update ncurses to the latest version that includes fixes for these memory bugs.

Original NVD description (English source)

There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS