Linux Distros Unpatched Vulnerability : CVE-2017-10684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

RHEL 7 : ncurses (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ncurses: Stack-based buffer overflow caused by format string vulnerability in fmtentry function...

SUSE CVE-2017-10684

In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

Ubuntu: Security Advisory (USN-5448-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0002)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2701-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2075-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2018-1166)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.5.0 : ncurses (EulerOS-SA-2018-1252)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary...

Photon OS 1.0: Libxml2 / Ncurses / Openldap / Ruby PHSA-2017-0024 (deprecated)

An update of ncurses,openldap,libxml2,ruby packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0024. The text itself is copyright C...

EulerOS 2.0 SP3 : ncurses (EulerOS-SA-2018-1166)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution...

openSUSE Security Update : ncurses (openSUSE-2017-920)

This update for ncurses fixes the following issues : Security issues fixed : - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to...

SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2017:2075-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to...

SUSE SLES11 Security Update : ncurses (SUSE-SU-2017:2076-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to...

CVE-2017-10684

In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

openSUSE Security Update : ncurses (openSUSE-2017-823)

This update for ncurses fixes the following issues : Security issues fixed : - CVE-2017-10684: Possible RCE via stack-based buffer overflow in the fmtentry function. bsc1046858 - CVE-2017-10685: Possible RCE with format string vulnerability in the fmtentry function. bsc1046853 Bugfixes : - Drop...

SUSE SLED12 / SLES12 Security Update : Recommended update for ncurses (SUSE-SU-2017:1815-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-10684: Possible RCE via stack-based buffer overflow in the fmtentry function. bsc1046858 - CVE-2017-10685: Possible RCE with format string vulnerability in the fmtentry function. bsc1046853 Bugfixes : - Drop...

SUSE SLES11 Security Update : Recommended update for ncurses (SUSE-SU-2017:1790-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-10684: Possible RCE via stack-based buffer overflow in the fmtentry function. bsc1046858 - CVE-2017-10685: Possible RCE with format string vulnerability in the fmtentry function. bsc1046853 Note that Tenable...

CVE-2017-10684

CVE-2017-10684 affects the ncurses (new curses) library up to version 6.0, with a stack-based buffer overflow in fmt_entry that could allow a remote attacker to execute arbitrary code. The connected documents confirm the vulnerability context but do not provide a specific patch version or remedia...