USN-9078-1: ncmpc vulnerability
Published Nov 12, 2026
·Updated
It was discovered that ncmpc incorrectly handled long chat messages. A remote attacker could possibly use this issue to cause ncmpc to crash, resulting in a denial of service.
Affected Software
3 affected componentsFixes available
All of the following
ubuntu/ncmpc<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
ubuntu/ncmpc<0.27-1ubuntu0.1~esm1
0.27-1ubuntu0.1~esm1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/ncmpcto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/ncmpcto a version that resolves this vulnerability.Fixed in 0.27-1ubuntu0.1~esm1
Event History
Nov 12, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Advisory Published
via OSV·08:52 PM
Data Sourced
via OSV·08:52 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which package is covered by this notice?
The notice covers the ubuntu/ncmpc package for Ubuntu.
2
Which vulnerability identifier is associated with this notice?
The notice references CVE-2018-9240.