CVE-2018-9240

HIGH

ncmpc < 0.29 - Denial of Service via Long Chat Message

Title source: llm

Description

ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur.

References (3)

Core 3

Core References

Third Party Advisory x_refsource_confirm

https://bugs.debian.org/894724

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

https://lists.debian.org/debian-lts-announce/2020/04/msg00020.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/4507-1/

Scores

CVSS v3 7.5

EPSS 0.0044

EPSS Percentile 63.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (3)

canonical/ubuntu_linux 16.04

debian/debian_linux 8.0

ncmpc_project/ncmpc < 0.29

Published Apr 03, 2018

Tracked Since Feb 18, 2026