CVE-2018-19211

In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
gnuncurses
6.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ncurses
bookworm
6.4-4
fixed
bullseye
6.2+20201114-2+deb11u2
fixed
jessie
no-dsa
sid
6.5-2
fixed
stretch
postponed
trixie
6.5-2
fixed
wheezy
ignored
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ncurses
bionic
Fixed 6.1-1ubuntu1.18.04
released
cosmic
not-affected
disco
not-affected
eoan
not-affected
focal
not-affected
groovy
not-affected
hirsute
not-affected
impish
not-affected
jammy
not-affected
trusty
Fixed 5.9+20140118-1ubuntu1+esm2
released
xenial
Fixed 6.0+20160213-1ubuntu1+esm2
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libncurses5
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
libncurses5-32bit
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
libncurses6
suse enterprise desktop 15
6.1-5.3.1
fixed
suse enterprise desktop 15 SP1
6.1-5.3.1
fixed
suse enterprise desktop 15 SP2
6.1-5.3.1
fixed
suse enterprise desktop 15 SP3
6.1-5.3.1
fixed
suse enterprise desktop 15 SP4
6.1-5.3.1
fixed
suse enterprise desktop 15 SP5
6.1-5.3.1
fixed
suse enterprise desktop 15 SP6
6.1-5.3.1
fixed
suse enterprise desktop 15 SP7
6.1-5.3.1
fixed
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
libncurses6-32bit
suse enterprise desktop 15
6.1-5.3.1
fixed
suse enterprise desktop 15 SP1
6.1-5.3.1
fixed
suse enterprise desktop 15 SP2
6.1-5.3.1
fixed
suse enterprise desktop 15 SP3
6.1-5.3.1
fixed
suse enterprise desktop 15 SP4
6.1-5.3.1
fixed
suse enterprise desktop 15 SP5
6.1-5.3.1
fixed
suse enterprise desktop 15 SP6
6.1-5.3.1
fixed
suse enterprise desktop 15 SP7
6.1-5.3.1
fixed
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
ncurses-devel
suse enterprise desktop 15
6.1-5.3.1
fixed
suse enterprise desktop 15 SP1
6.1-5.3.1
fixed
suse enterprise desktop 15 SP2
6.1-5.3.1
fixed
suse enterprise desktop 15 SP3
6.1-5.3.1
fixed
suse enterprise desktop 15 SP4
6.1-5.3.1
fixed
suse enterprise desktop 15 SP5
6.1-5.3.1
fixed
suse enterprise desktop 15 SP6
6.1-5.3.1
fixed
suse enterprise desktop 15 SP7
6.1-5.3.1
fixed
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
ncurses-devel-32bit
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
ncurses-utils
suse enterprise desktop 15
6.1-5.3.1
fixed
suse enterprise desktop 15 SP1
6.1-5.3.1
fixed
suse enterprise desktop 15 SP2
6.1-5.3.1
fixed
suse enterprise desktop 15 SP3
6.1-5.3.1
fixed
suse enterprise desktop 15 SP4
6.1-5.3.1
fixed
suse enterprise desktop 15 SP5
6.1-5.3.1
fixed
suse enterprise desktop 15 SP6
6.1-5.3.1
fixed
suse enterprise desktop 15 SP7
6.1-5.3.1
fixed
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
ncurses5-devel
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
tack
suse enterprise desktop 15
6.1-5.3.1
fixed
suse enterprise desktop 15 SP1
6.1-5.3.1
fixed
suse enterprise desktop 15 SP2
6.1-5.3.1
fixed
suse enterprise desktop 15 SP3
6.1-5.3.1
fixed
suse enterprise desktop 15 SP4
6.1-5.3.1
fixed
suse enterprise desktop 15 SP5
6.1-5.3.1
fixed
suse enterprise desktop 15 SP6
6.1-5.3.1
fixed
suse enterprise desktop 15 SP7
6.1-5.3.1
fixed
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
terminfo
suse enterprise desktop 15
6.1-5.3.1
fixed
suse enterprise desktop 15 SP1
6.1-5.3.1
fixed
suse enterprise desktop 15 SP2
6.1-5.3.1
fixed
suse enterprise desktop 15 SP3
6.1-5.3.1
fixed
suse enterprise desktop 15 SP4
6.1-5.3.1
fixed
suse enterprise desktop 15 SP5
6.1-5.3.1
fixed
suse enterprise desktop 15 SP6
6.1-5.3.1
fixed
suse enterprise desktop 15 SP7
6.1-5.3.1
fixed
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
terminfo-base
suse enterprise desktop 15
6.1-5.3.1
fixed
suse enterprise desktop 15 SP1
6.1-5.3.1
fixed
suse enterprise desktop 15 SP2
6.1-5.3.1
fixed
suse enterprise desktop 15 SP3
6.1-5.3.1
fixed
suse enterprise desktop 15 SP4
6.1-5.3.1
fixed
suse enterprise desktop 15 SP5
6.1-5.3.1
fixed
suse enterprise desktop 15 SP6
6.1-5.3.1
fixed
suse enterprise desktop 15 SP7
6.1-5.3.1
fixed
suse enterprise sap 12 SP3
5.9-61.1
fixed
suse enterprise sap 12 SP4
5.9-61.1
fixed
suse enterprise sap 12 SP5
5.9-64.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 12 SP3
5.9-61.1
fixed
suse enterprise server 12 SP4
5.9-61.1
fixed
suse enterprise server 12 SP5
5.9-64.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
terminfo-iterm
suse enterprise desktop 15
6.1-5.3.1
fixed
suse enterprise desktop 15 SP1
6.1-5.3.1
fixed
suse enterprise desktop 15 SP2
6.1-5.3.1
fixed
suse enterprise desktop 15 SP3
6.1-5.3.1
fixed
suse enterprise desktop 15 SP4
6.1-5.3.1
fixed
suse enterprise desktop 15 SP5
6.1-5.3.1
fixed
suse enterprise desktop 15 SP6
6.1-5.3.1
fixed
suse enterprise desktop 15 SP7
6.1-5.3.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
terminfo-screen
suse enterprise desktop 15
6.1-5.3.1
fixed
suse enterprise desktop 15 SP1
6.1-5.3.1
fixed
suse enterprise desktop 15 SP2
6.1-5.3.1
fixed
suse enterprise desktop 15 SP3
6.1-5.3.1
fixed
suse enterprise desktop 15 SP4
6.1-5.3.1
fixed
suse enterprise desktop 15 SP5
6.1-5.3.1
fixed
suse enterprise desktop 15 SP6
6.1-5.3.1
fixed
suse enterprise desktop 15 SP7
6.1-5.3.1
fixed
suse enterprise sap 15
6.1-5.3.1
fixed
suse enterprise sap 15 SP1
6.1-5.3.1
fixed
suse enterprise sap 15 SP2
6.1-5.3.1
fixed
suse enterprise sap 15 SP3
6.1-5.3.1
fixed
suse enterprise sap 15 SP4
6.1-5.3.1
fixed
suse enterprise sap 15 SP5
6.1-5.3.1
fixed
suse enterprise sap 15 SP6
6.1-5.3.1
fixed
suse enterprise sap 15 SP7
6.1-5.3.1
fixed
suse enterprise server 15
6.1-5.3.1
fixed
suse enterprise server 15 SP1
6.1-5.3.1
fixed
suse enterprise server 15 SP2
6.1-5.3.1
fixed
suse enterprise server 15 SP3
6.1-5.3.1
fixed
suse enterprise server 15 SP4
6.1-5.3.1
fixed
suse enterprise server 15 SP5
6.1-5.3.1
fixed
suse enterprise server 15 SP6
6.1-5.3.1
fixed
suse enterprise server 15 SP7
6.1-5.3.1
fixed
Common Weakness Enumeration
References
https://bugzilla.redhat.com/show_bug.cgi?id=1643754
https://bugzilla.redhat.com/show_bug.cgi?id=1643754