CVE-2017-13728EPSS p89.9%

CVE-2017-13728CVE-2017-13728

invisible-island / ncurses

Description

There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.

Scoring

CVSS 7.5 ()
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS3.90% probability of exploitation · percentile 89.9% · 2026-10-05T12:00:23Z
Last modified2026-07-23
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.