NC
Product
Ncurses
by Invisible-island · last CVE Mar 19, 2026
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 16Low 0
Watch

Add Ncurses to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-19186
6.5
2%
Aug 22
Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
Affected: 6.1
CVE-2020-19190
6.5
2%
Aug 22
Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
Affected: 6.1
CVE-2020-19189
6.5
2%
Aug 22
Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
Affected: 6.1
CVE-2020-19187
6.5
2%
Aug 22
Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
Affected: 6.1
CVE-2020-19188
6.5
2%
Aug 22
Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
Affected: 6.1
CVE-2020-19185
6.5
2%
Aug 22
Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command
Affected: 6.1
CVE-2018-19217
6.5
1%
Nov 12
In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack
Affected: 6.1
CVE-2017-13734
6.5
2%
Aug 29
There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack
Affected: 6.0
CVE-2017-13733
6.5
3%
Aug 29
There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack
Affected: 6.0
CVE-2017-13732
6.5
3%
Aug 29
There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack
Affected: 6.0
CVE-2017-13731
6.5
3%
Aug 29
There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack
Affected: 6.0
CVE-2017-13730
6.5
3%
Aug 29
There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack
Affected: 6.0
CVE-2017-13729
6.5
3%
Aug 29
There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0
Affected: 6.0
CVE-2018-19211
5.5
1%
Nov 12
In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack
Affected: 6.1
CVE-2019-17595
5.4
2%
Oct 14
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012
Affected: before 6.2
CVE-2019-17594
5.3
1%
Oct 14
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012
Affected: before 6.2
Showing 16