CVE-2017-13728 in GNU and Canonical Products
Published on August 29, 2017
There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.
Products Associated with CVE-2017-13728
stack.watch emails you whenever new vulnerabilities are published in GNU Ncurses or Canonical Ubuntu Linux. Just hit a watch button to start following.
Exploit Probability
EPSS
0.45%
Percentile
63.23%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.