Findings

CVE-2020-19189

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

Published Aug 22, 2023 · updated Oct 14, 2026 · invisible-island ncurses

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 22, 2023 · NIST NVD

    Detected

    Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

Affected

  • cpe debian/debian linux10.0
  • cpe invisible-island/ncurses6.1
  • cpe netapp/active iq unified managerversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2020-19189

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2020-19189

    30-day exploitation probability 2.3%

    first.org
  • NIST NVDVulnerability recordCVE-2020-19189

    Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

    nvd.nist.gov

References