CVE-2018-9240

HIGH 7.5CVE-2018-9240 · Published 03/04/2018 · updated 17/06/2026

In short

CVE-2018-9240 is a HIGH (CVSS 7.5) vulnerability affecting ncmpc (ncmpc project).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ncmpc ncmpc_project	`≤ 0.29`	No fix yet

Description

ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur.

References

bugs.debian.org/894724 · Third Party Advisory
lists.debian.org/debian-lts-announce/2020/04/msg00020.html · Mailing List
usn.ubuntu.com/4507-1 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free