CVE-2018-19211

5.5 mediumEPSS 0.9%

Medium (5.5) in invisible-island ncurses. EPSS 0.9% chance of exploitation in the next 30 days.

In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2018-11-12
Modified: 2026-07-23
Record from: the NVD, synced 2026-10-19

Affected

invisible-island:ncurses

References

https://bugzilla.redhat.com/show_bug.cgi?id=1643754
https://bugzilla.redhat.com/show_bug.cgi?id=1643754

Check your stack JSON