high7.5
CVE-2018-9240
ncmpc through 0.29 is prone to a NULL pointer dereference flaw.
Impact
ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ncmpc Project | Ncmpc | through 0.29 |
| Debian | Debian Linux | Version 8.0 |
| Canonical | Ubuntu Linux | Version 16.04 |