CVE-2020-19189

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

2.21% chance of exploitation in the next 30 days, 81th percentile

Published

2023-08-22

Updated

2024-08-04

Proof-of-concept exploits (1)

• zjuchenyuan/fuzzpoc/blob/master/infotocap_poc5.md

References

• CVE Record
• NVD entry

Related

• CVE-2020-19185
• CVE-2020-19186
• CVE-2020-19187
• CVE-2020-19188
• CVE-2020-19190
• CVE-2020-19199