CVE-2020-19186

MediumCVSS 6.5

Published: 22/08/2023(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.47%

71th percentile - higher than 71% of all known CVEs

Summary

A buffer overflow vulnerability was detected in ncurses version 6.1 in the _nc_find_entry function in tinfo/comp_hash.c:66. A remote attacker can cause a denial of service via a crafted command.

Risk Assessment

A remote attacker can crash applications using ncurses, potentially leading to service disruption and data loss.

Recommendation

Update the ncurses library to the latest available version that includes the security fix.

Original NVD description (English source)

Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.