Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-10685

Опубликовано: 24 июн. 2017
Источник: redhat
CVSS3: 0

Описание

In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

Отчет

Red Hat considers this issue as a duplicate of CVE-2017-10684.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5ncursesWill not fix
Red Hat Enterprise Linux 6ncursesWill not fix
Red Hat Enterprise Linux 7ncursesWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1473312ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

0 Low

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

CVSS3: 9.8
nvd
больше 8 лет назад

In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

CVSS3: 9.8
debian
больше 8 лет назад

In ncurses 6.0, there is a format string vulnerability in the fmt_entr ...

CVSS3: 9.8
github
больше 3 лет назад

In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

suse-cvrf
больше 8 лет назад

Recommended update for ncurses

0 Low

CVSS3