PT-2017-13049
CVE-2017-13728
·
Published
2017-08-29
·
Updated
2022-05-26
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
ncurses version 6.0
Description
The issue is related to an infinite loop in the next char function in comp scan.c, which is connected to libtic. A specially crafted input can cause a remote denial of service attack.
Recommendations
For ncurses version 6.0, consider applying a patch to fix the infinite loop in the next char function to prevent remote denial of service attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾