{"id":"CVE-2018-19211","aliases":["DEBIAN-CVE-2018-19211","EUVD-2018-10920","GHSA-g37h-6hrw-v99v","JLSEC-2026-442","SUSE-SU-2018:3967-1","SUSE-SU-2018:4000-1","UBUNTU-CVE-2018-19211","USN-5477-1"],"status":"published","title":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c...","description":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*' in name or alias field\" detection.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00863,"percentile":0.58868,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2018-11-12T19:00:00Z","modified":"2026-10-23T18:03:03Z","fixes":[{"ecosystem":"Debian:12","package":"ncurses","fixed_in":["6.1+20180210-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ncurses","fixed_in":["6.1+20180210-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ncurses","fixed_in":["6.1+20180210-3"],"sources":["osv"]},{"ecosystem":"Julia","package":"Ncurses_jll","fixed_in":["6.2.0+0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ncurses","fixed_in":["5.9-61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"ncurses","fixed_in":["5.9-61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ncurses","fixed_in":["5.9-61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ncurses","fixed_in":["5.9-61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ncurses","fixed_in":["5.9-61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ncurses","fixed_in":["5.9-61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ncurses","fixed_in":["5.9-61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ncurses","fixed_in":["5.9-61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"ncurses","fixed_in":["6.1-5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ncurses","fixed_in":["6.1-5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"ncurses","fixed_in":["6.1-5.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","fixed_in":["5.9+20140118-1ubuntu1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","fixed_in":["6.0+20160213-1ubuntu1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ncurses","fixed_in":["6.1-1ubuntu1.18.04"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20180210-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20180210-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1+20180210-3"}]}]},{"source":"osv","ecosystem":"Julia","package":"Ncurses_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.2.0+0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-5.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm2"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm2"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1ubuntu1.18.04"}]}],"versions":["6.0+20160625-1ubuntu1","6.0+20171125-1ubuntu1","6.1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9+20140118-1ubuntu1+esm2"}]}],"versions":["5.9+20130608-1ubuntu1","5.9+20131221-1ubuntu1","5.9+20140118-1ubuntu1","5.9+20140118-1ubuntu1+esm1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ncurses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+20160213-1ubuntu1+esm2"}]}],"versions":["5.9+20150516-2ubuntu1","6.0+20151024-2ubuntu1","6.0+20151024-2ubuntu2","6.0+20160213-1ubuntu1","6.0+20160213-1ubuntu1+esm1"],"bundled":6}],"products":[{"vendor":"invisible-island","product":"ncurses"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643754","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19211"},{"url":"https://github.com/advisories/GHSA-g37h-6hrw-v99v"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-19211","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183967-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1115929","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19211","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184000-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1103320","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19211","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5477-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-16879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-39537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-29458","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-19211","description":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*' in name or alias field\" detection.","status":"published","published":"2018-11-12T19:00:00Z","modified":"2024-08-05T11:30:04.065Z","updated_at":"2026-11-02T14:35:03.288698Z"}],"euvd":[{"id":"EUVD-2018-10920","description":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*' in name or alias field\" detection.","status":"published","published":"2018-11-12T19:00:00Z","modified":"2024-08-05T11:30:04Z","updated_at":"2026-11-03T02:39:33.782065Z"}],"ghsa":[{"id":"GHSA-g37h-6hrw-v99v","title":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c...","description":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*' in name or alias field\" detection.","status":"published","published":"2022-05-14T01:07:26Z","modified":"2023-02-02T05:02:59Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:51:32.869646Z"}],"nvd":[{"id":"CVE-2018-19211","description":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*' in name or alias field\" detection.","status":"published","published":"2018-11-12T19:29:00.347Z","modified":"2026-07-23T18:58:25.76Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:04:47.196456Z"}],"osv":[{"id":"CVE-2018-19211","description":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*' in name or alias field\" detection.","status":"published","published":"2018-11-12T19:29:00.347Z","modified":"2026-07-08T16:39:56.526363Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.834469Z"},{"id":"DEBIAN-CVE-2018-19211","description":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*' in name or alias field\" detection.","status":"published","published":"2018-11-12T19:29:00.347Z","modified":"2026-10-23T18:03:03.882874214Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"JLSEC-2026-442","description":"In ncurses 6.1, there is a NULL pointer dereference at function `_nc_parse_entry` in `parse_entry.c` that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*` in name or alias field\" detection.","status":"published","published":"2026-05-05T15:51:30.603Z","modified":"2026-07-25T18:24:26.029559441Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"UBUNTU-CVE-2018-19211","description":"In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a \"dubious character `*' in name or alias field\" detection.","status":"published","published":"2018-11-12T19:29:00Z","modified":"2026-04-22T11:50:35.599113Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"SUSE-SU-2018:3967-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issue:\n\nSecurity issue fixed:\n\n- CVE-2018-19211: Fixed denial of service issue that was triggered by a NULL pointer dereference at function _nc_parse_entry (bsc#1115929).\n","status":"published","published":"2018-12-03T14:34:23Z","modified":"2026-02-04T04:00:14.727552Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:4000-1","title":"Security update for ncurses","description":"This update for ncurses fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-19211: Fixed denial of service issue that was triggered by a NULL pointer dereference at function _nc_parse_entry (bsc#1115929).\n\nNon-security issue fixed:\n\n- Remove scree.xterm from terminfo data base as with this screen uses fallback TERM=screen (bsc#1103320). \n","status":"published","published":"2018-12-06T13:32:06Z","modified":"2026-02-04T03:00:43.560103Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-5477-1","title":"ncurses vulnerabilities","description":"Hosein Askari discovered that ncurses was incorrectly performing\nmemory management operations when dealing with long filenames while\nwriting structures into the file system. An attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary\ncode. (CVE-2017-16879)\n\nChung-Yi Lin discovered that ncurses was incorrectly handling access\nto invalid memory areas when parsing terminfo or termcap entries where\nthe use-name had invalid syntax. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2018-19211)\n\nIt was discovered that ncurses was incorrectly performing bounds\nchecks when processing invalid hashcodes. An attacker could possibly\nuse this issue to cause a denial of service or to expose sensitive\ninformation. (CVE-2019-17594)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when processing terminfo and termcap files.\nAn attacker could possibly use this issue to cause a denial of\nservice or to expose sensitive information. (CVE-2019-17595)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when converting between termcap and\nterminfo formats. An attacker could possibly use this issue to cause\na denial of service or execute arbitrary code. (CVE-2021-39537)\n\nIt was discovered that ncurses was incorrectly performing bounds\nchecks when dealing with corrupt terminfo data while reading a\nterminfo file. An attacker could possibly use this issue to cause a\ndenial of service or to expose sensitive information.\n(CVE-2022-29458)\n","status":"published","published":"2022-06-14T11:17:52Z","modified":"2026-06-29T13:49:39.254663481Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}