PT-2018-18924 · Music Player Daemon+2 · Ncmpc+2

·

CVE-2018-9240

·

Published

2018-04-03

·

Updated

2023-01-20

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ncmpc versions prior to 0.30
Description The issue is related to a NULL pointer dereference flaw. If a user is using the chat screen and another client sends a long chat message, it could cause a crash and denial of service.
Recommendations For versions prior to 0.30, update to version 0.30 or later to resolve the issue.

Fix

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2018-2366
CVE-2018-9240
DLA-2186-1
USN-4507-1

Affected Products

Alt Linux
Ubuntu
Ncmpc