Remote Denial of Service Vulnerability in ncurses by The GNU Project

CVE-2017-11113

Summary

In ncurses version 6.0, there exists a vulnerability characterized by a NULL pointer dereference in the _nc_parse_entry function found in tinfo/parse_entry.c. This flaw can result in a remote denial of service attack, especially when untrusted terminfo data is processed. Ensuring that only trusted data is handled by the terminfo library is crucial for mitigating potential service disruptions.

References