This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-19211 →

DEBIAN-CVE-2018-19211

In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The pro...

Original description

The description as published by the source.

In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 ncurses

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20180210-3"}]}]

Debian:13 ncurses

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20180210-3"}]}]

Debian:14 ncurses

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20180210-3"}]}]

References

advisory security-tracker.debian.org