CVE-2018-19211 in GNU and Canonical Products
Published on November 12, 2018
In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.
Products Associated with CVE-2018-19211
stack.watch emails you whenever new vulnerabilities are published in GNU Ncurses or Canonical Ubuntu Linux. Just hit a watch button to start following.
Exploit Probability
EPSS
0.28%
Percentile
50.99%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.