CVE-2017-13730 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Ncurses
CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer10 documents8 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 34.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 29
Latest updateMay 26
Description
There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6
Affected Packages2 packages
🔴Vulnerability Details
4GHSA▶
GHSA-gppm-cv87-9w2v: There is an illegal address access in the function _nc_read_entry_source() in progs/tic↗2022-05-13
OSV▶
CVE-2017-13730: There is an illegal address access in the function _nc_read_entry_source() in progs/tic↗2017-08-29
CVEList▶
CVE-2017-13730: There is an illegal address access in the function _nc_read_entry_source() in progs/tic↗2017-08-29