Skip to content
OpenAdvisories
Unscored USN-4507-1 1 CVE

ncmpc vulnerability

Published Sep 16, 2020 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ncmpc incorrectly handled long chat messages. A remote
attacker could possibly exploit this with a crafted chat message, causing ncmpc
to crash, resulting in a denial of service. (CVE-2018-9240)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS ncmpc 0.24-1+deb8u1build0.16.04.1

Vulnerabilities 1

  • Unscored —
    CVE-2018-9240

    ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends…

    ncmpc ncmpc Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-9240