CVE-2020-19185
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk70th percentile - higher than 70% of all known CVEs
Summary
A buffer overflow vulnerability was found in ncurses 6.1 in the one_one_mapping function in progs/dump_entry.c:1373. A remote attacker can cause a denial of service (DoS) by sending a crafted command.
Risk Assessment
The organization is at risk of DoS attacks that can disrupt applications using ncurses, such as terminals and text-based tools, potentially affecting productivity.
Recommendation
Update the ncurses library to the latest available version that includes a security fix. Check for updates in your system distribution's repository.
Original NVD description (English source)
Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

