Skip to content
OpenAdvisories
Unscored USN-9078-1 1 CVE

ncmpc vulnerability

Published Nov 12, 2026 · Updated Nov 13, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ncmpc incorrectly handled long chat messages. A
remote attacker could possibly use this issue to cause ncmpc to crash,
resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS ncmpc 0.27-1ubuntu0.1~esm1

Vulnerabilities 1

  • Unscored —
    CVE-2018-9240

    ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends…

    ncmpc ncmpc Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-9240