CVE-2018-19217EPSS p66.0%
CVE-2018-19217CVE-2018-19217
invisible-island / ncurses
Description
In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not reproduce for that version according to the maintainer or a reliable third-party
Scoring
| CVSS | 6.5 () |
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| EPSS | 1.16% probability of exploitation · percentile 66.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-07-23 |