CVE-2020-19188

MediumCVSS 6.5/10Last modified Oct 14, 2026

Description

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Aug 22, 2023
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-191896.5Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a CVE-2020-19197.5Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument passed in is longer thanCVE-2020-191906.5Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service CVE-2020-191998.8A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious uCVE-2020-19207.5A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resoCVE-2020-192015.4A Stored Cross-Site Scripting (XSS) vulnerability was found in status_filter_reload.php, a page in the pfSense software WebGUI, on Netgate pCVE-2020-192025.4An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITCVE-2020-192035.4An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a component of the pfSense soCVE-2020-192045.4An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in thCVE-2020-19217.5In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within tCVE-2020-192124.9SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete.CVE-2020-192139.8SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.