CVE Catalog

CVE-2020-19190

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.40%

70th percentile - higher than 70% of all known CVEs

Summary

A buffer overflow vulnerability was found in ncurses 6.1 in the _nc_find_entry function in tinfo/comp_hash.c:70. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

Risk Assessment

The organization is at risk of DoS attacks that can disrupt applications using ncurses, such as terminals and text-based tools, potentially affecting productivity.

Recommendation

Update the ncurses library to the latest available version that includes a security fix. Check for updates in your system distribution's repository.

Original NVD description (English source)

Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS