CVE-2020-19189

MediumCVSS 6.5

Published: 22/08/2023(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.90%

77th percentile - higher than 77% of all known CVEs

Summary

In ncurses 6.1, a buffer overflow vulnerability in the postprocess_terminfo function in tinfo/parse_entry.c:997 allows a remote attacker to cause a denial of service via a crafted command.

Risk Assessment

A remote attacker can cause a crash of applications using ncurses, leading to service disruption.

Recommendation

It is recommended to update the ncurses library to version 6.2 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.