CVE-2017-1195

IBM Curam Social Program Management (SPM) is affected by CVE-2017-1195 due to a phishing/open-redirect vulnerability in the Resource Store servlet. Affected versions include 7.0.0.0–7.0.0.1 and 6.2.0.0–6.2.0.4, 6.1.1.0–6.1.1.4, 6.1.0.0–6.1.0.4, and 6.0.5.0–6.0.5.10, 6.0.4.0–6.0.4.9. An attacker c...

Denial of service

There is an illegal address access in the ncsafestrcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack...

CVE-2017-13734

There is an illegal address access in the ncsafestrcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack...

CVE-2017-13732

There is an illegal address access in the function dumpuses in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13729

There is an illegal address access in the ncsavestr function in allocentry.c in ncurses 6.0. It will lead to a remote denial of service attack...

DEBIAN-CVE-2017-13732

There is an illegal address access in the function dumpuses in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13730

There is an illegal address access in the function ncreadentrysource in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13734

There is an illegal address access in the ncsafestrcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack...

CVE-2017-13729

There is an illegal address access in the ncsavestr function in allocentry.c in ncurses 6.0. It will lead to a remote denial of service attack...

Design/Logic Flaw

There is an infinite loop in the nextchar function in compscan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack...

CVE-2017-13733

There is an illegal address access in the fmtentry function in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

UBUNTU-CVE-2017-13730

There is an illegal address access in the function ncreadentrysource in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack...

UBUNTU-CVE-2017-13733

There is an illegal address access in the fmtentry function in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

Design/Logic Flaw

There is an illegal address access in the function dumpuses in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13734

There is an illegal address access in the ncsafestrcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack...

CVE-2017-13728

There is an infinite loop in the nextchar function in compscan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack...

CVE-2017-13732

There is an illegal address access in the function dumpuses in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...

CVE-2017-13733

There is an illegal address access in the fmtentry function in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13730

There is an illegal address access in the function ncreadentrysource in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack...