CVE-2018-19211: Null Pointer Dereference
Published Nov 12, 2018
·Updated
In ncurses 6.1, there is a NULL pointer dereference at function ncparseentry in parseentry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character ' in name or alias field" detection.
Affected Software
2 affected components
GNU ncurses=6.1
invisible-island Ncurses=6.1
Event History
Nov 12, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this ncurses vulnerability?
The vulnerability ID is CVE-2018-19211.
2
What is the severity of CVE-2018-19211?
The severity of CVE-2018-19211 is medium.
3
How does CVE-2018-19211 affect ncurses?
CVE-2018-19211 affects ncurses 6.1.
4
What is the description of CVE-2018-19211?
CVE-2018-19211 is a NULL pointer dereference vulnerability in ncurses 6.1 that can lead to a denial of service attack.
5
How can CVE-2018-19211 be exploited?
CVE-2018-19211 can be exploited by passing a malicious input to the function _nc_parse_entry in parse_entry.c.