SUSE SLES11 Security Update : ncurses (SUSE-SU-2017:2076-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to...

SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2017:2075-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to...

CVE-2017-10684

In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

openSUSE Security Update : ncurses (openSUSE-2017-823)

This update for ncurses fixes the following issues : Security issues fixed : - CVE-2017-10684: Possible RCE via stack-based buffer overflow in the fmtentry function. bsc1046858 - CVE-2017-10685: Possible RCE with format string vulnerability in the fmtentry function. bsc1046853 Bugfixes : - Drop...

SUSE SLED12 / SLES12 Security Update : Recommended update for ncurses (SUSE-SU-2017:1815-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-10684: Possible RCE via stack-based buffer overflow in the fmtentry function. bsc1046858 - CVE-2017-10685: Possible RCE with format string vulnerability in the fmtentry function. bsc1046853 Bugfixes : - Drop...

SUSE SLES11 Security Update : Recommended update for ncurses (SUSE-SU-2017:1790-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-10684: Possible RCE via stack-based buffer overflow in the fmtentry function. bsc1046858 - CVE-2017-10685: Possible RCE with format string vulnerability in the fmtentry function. bsc1046853 Note that Tenable...

CVE-2017-10684

CVE-2017-10684 affects the ncurses (new curses) library up to version 6.0, with a stack-based buffer overflow in fmt_entry that could allow a remote attacker to execute arbitrary code. The connected documents confirm the vulnerability context but do not provide a specific patch version or remedia...

SAP Netweaver ABAP EA-DFPS Remote Authentication Bypass Vulnerability (CNVD-2017-10684)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An authentication bypass vulnerability exists in SAP Netweaver ABAP. An attacker could exploit this vulnerabilit...