Name: CVE-2017-13731: Improper Restriction of Operations within the Bounds of a Memory Buffer
Published: 2017-08-29T00:00:00.000Z
Keywords: CVE, CVE-2017-13731, CWE-119, CVSS 6.5, EPSS 0.02906

There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack.

CVSS Details

CVSS 3.0 Base Score: 6.5
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	View advisory ↗View advisory ↗	alpine-linux-upgrade-ncurses	Oct 25, 2017	Aug 29, 2017
Debian	View advisory ↗	debian-upgrade-ncurses	Jul 30, 2024	Aug 29, 2017
Freebsd	View advisory ↗	freebsd-upgrade-package-ncurses	Oct 11, 2017	Oct 11, 2017
Gentoo Linux	View advisory ↗	gentoo-linux-upgrade-sys-libs-ncurses	Apr 18, 2018	Aug 29, 2017
Huawei Euleros 2_0_sp2	View advisory ↗	huawei-euleros-2_0_sp2-upgrade-ncurseshuawei-euleros-2_0_sp2-upgrade-ncurses-basehuawei-euleros-2_0_sp2-upgrade-ncurses-develhuawei-euleros-2_0_sp2-upgrade-ncurses-libshuawei-euleros-2_0_sp2-upgrade-ncurses-term	Dec 4, 2019	Aug 29, 2017
Huawei Euleros 2_0_sp3	View advisory ↗	huawei-euleros-2_0_sp3-upgrade-ncurseshuawei-euleros-2_0_sp3-upgrade-ncurses-basehuawei-euleros-2_0_sp3-upgrade-ncurses-develhuawei-euleros-2_0_sp3-upgrade-ncurses-libshuawei-euleros-2_0_sp3-upgrade-ncurses-term	Dec 18, 2019	Aug 29, 2017
Huawei Euleros 2_0_sp5	View advisory ↗	huawei-euleros-2_0_sp5-upgrade-ncurseshuawei-euleros-2_0_sp5-upgrade-ncurses-basehuawei-euleros-2_0_sp5-upgrade-ncurses-develhuawei-euleros-2_0_sp5-upgrade-ncurses-libshuawei-euleros-2_0_sp5-upgrade-ncurses-term	Feb 24, 2020	Aug 29, 2017
Oracle Solaris	View advisory ↗	oracle-solaris-11-4-upgrade-library-ncurses-6-1-0-20190105-11-4-8-0-1-1-0	Apr 17, 2019	Aug 29, 2017
Redhat_linux	—	no-fix-redhat-rpm-package	Jul 9, 2025	Aug 23, 2017
Suse	—	suse-upgrade-libncurses5suse-upgrade-libncurses5-32bitsuse-upgrade-libncurses5-x86suse-upgrade-libncurses6suse-upgrade-libncurses6-32bitsuse-upgrade-libncurses6-x86suse-upgrade-ncurses-develsuse-upgrade-ncurses-devel-32bitsuse-upgrade-ncurses-utilssuse-upgrade-tacksuse-upgrade-terminfosuse-upgrade-terminfo-base	Dec 1, 2017	Aug 29, 2017
Ubuntu	View advisory ↗	ubuntu-pro-upgrade-lib32ncurses5ubuntu-pro-upgrade-lib32ncursesw5ubuntu-pro-upgrade-lib32tinfo5ubuntu-pro-upgrade-lib64ncurses5ubuntu-pro-upgrade-lib64tinfo5ubuntu-pro-upgrade-libncurses5ubuntu-pro-upgrade-libncursesw5ubuntu-pro-upgrade-libtinfo5ubuntu-pro-upgrade-libx32ncurses5ubuntu-pro-upgrade-libx32ncursesw5ubuntu-pro-upgrade-libx32tinfo5ubuntu-pro-upgrade-ncurses-baseubuntu-pro-upgrade-ncurses-binubuntu-pro-upgrade-ncurses-term	May 27, 2022	Aug 29, 2017
Vmware Photon_os	View advisory ↗	vmware-photon_os_update_tdnf	Jan 20, 2025	Aug 29, 2017

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub