Lucene search
Veracode Vulnerability DatabaseVERACODE:25348HistoryMay 10, 2020 - 11:27 p.m.
Buffer Overflow
2020-05-1023:27:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.022 Low
EPSS
Percentile
89.6%
ncurses is vulnerable to buffer overflow. Due to a flaw in ncurses, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ncurses:3.3 | eq | 6.0-r6 | |
| ncurses:3.3 | eq | 6.0_p20170701-r0 | |
| ncurses:3.5 | eq | 6.0_p20171125-r1 | |
| ncurses:3.6 | eq | 6.0_p20171125-r1 |
References
bugzilla.redhat.com/show_bug.cgi?id=1464687
lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
security.gentoo.org/glsa/201804-13
Related
ubuntucve
ubuntucve
CVE-2017-10684
2017-06-29 00:00:00
CVE-2017-10685
2017-06-29 00:00:00
cvelist
cvelist
CVE-2017-10684
2017-06-29 23:00:00
prion
prion
Stack overflow
2017-06-29 23:29:00
cve
cve
CVE-2017-10684
2017-06-29 23:29:00
nvd
nvd
CVE-2017-10684
2017-06-29 23:29:00
debiancve
debiancve
CVE-2017-10684
2017-06-29 23:29:00
redhatcve
redhatcve
CVE-2017-10684
2017-07-20 12:48:26
CVE-2017-10685
2017-07-20 13:18:36
alpinelinux
alpinelinux
CVE-2017-10684
2017-06-29 23:29:00
osv
osv
CVE-2017-10684
2017-06-29 23:29:00
ncurses vulnerabilities
2022-05-26 17:17:13
openvas
openvas
openSUSE: Security Advisory for ncurses (openSUSE-SU-2017:1882-1)
2017-07-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1815-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2018-1166)
2020-01-23 00:00:00
suse
suse
Recommended update for ncurses (important)
2017-07-06 15:12:50
Recommended update for ncurses (important)
2017-07-15 00:17:16
Recommended update for ncurses (important)
2017-07-07 15:14:15
nessus
nessus
openSUSE Security Update : ncurses (openSUSE-2017-823)
2017-07-18 00:00:00
photon
photon
amazon
amazon
Medium: ncurses
2019-09-30 22:49:00
mageia
mageia
Updated ncurses packages fix security vulnerabilities
2018-01-01 04:17:34
Updated ncurses packages fix security vulnerabilities
2018-01-01 04:17:34
gentoo
gentoo
ncurses: Multiple vulnerabilities
2018-04-17 00:00:00
ubuntu
ubuntu
ncurses vulnerabilities
2022-05-26 00:00:00
ibm
ibm