CVE-2017-11113

HIGH

ncurses 6.0 - Denial of Service via NULL Pointer Dereference in Terminfo Library

Title source: llm

Description

In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.

References (2)

Core 2

Core References

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201804-13

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://bugzilla.redhat.com/show_bug.cgi?id=1464691

Scores

CVSS v3 7.5

EPSS 0.0043

EPSS Percentile 63.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (1)

gnu/ncurses 6.0

Published Jul 08, 2017

Tracked Since Feb 18, 2026