CVE Catalog
CVE-2017-13734
MediumCVSS 6.5Exploitation Probability (EPSS)
High risk2.13%
80th percentile - higher than 80% of all known CVEs
Summary
There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.
Risk Assessment
A remote attacker can cause a crash of applications using ncurses, leading to service disruption.
Recommendation
It is recommended to update the ncurses library to version 6.1 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.