CVE Catalog

CVE-2020-19187

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.40%

70th percentile - higher than 70% of all known CVEs

Summary

A buffer overflow vulnerability was found in ncurses 6.1 in the fmt_entry function in progs/dump_entry.c:1100. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

Risk Assessment

The organization is at risk of DoS attacks that can disrupt applications using ncurses, such as terminals and text-based tools, potentially affecting productivity.

Recommendation

Update the ncurses library to the latest available version that includes a security fix. Check for updates in your system distribution's repository.

Original NVD description (English source)

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS