CVE Catalog
CVE-2018-19217
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk1.15%
64th percentile - higher than 64% of all known CVEs
Summary
A NULL pointer dereference vulnerability has been found in the ncurses library, possibly version 6.x, in the function _nc_name_match, which can lead to a denial of service attack.
Risk Assessment
An attacker can cause a crash in applications using ncurses, potentially leading to service disruption.
Recommendation
Update the ncurses library to the latest available version that contains the fix.
Original NVD description (English source)
In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not reproduce for that version according to the maintainer or a reliable third-party