NULL Pointer Dereference Vulnerability in ncurses by the Vendor

CVE-2018-19217

Summary

In certain versions of ncurses, particularly 6.x, a vulnerability exists due to a NULL pointer dereference in the _nc_name_match function. This may allow an attacker to exploit the issue, potentially leading to a denial of service condition. While earlier reports indicated that version 6.1 was affected, the maintainer noted that the problem did not reproduce for that specific version according to reliable sources.

References