CVE-2017-13729

There is an illegal address access in the ncsavestr function in allocentry.c in ncurses 6.0. It will lead to a remote denial of service attack...

CVE-2017-13729

There is an illegal address access in the ncsavestr function in allocentry.c in ncurses 6.0. It will lead to a remote denial of service attack...

CVE-2017-13730

There is an illegal address access in the function ncreadentrysource in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...

CVE-2017-13730

CVE-2017-13730 affects ncurses (ncurses) 6.0. The vulnerability is an illegal address access in the function _nc_read_entry_source() within progs/tic.c. This could lead to a remote denial of service when processing terminfo data via tic-related code paths. The Initial document confirms a DOs risk...

CVE-2017-13734

There is an illegal address access in the ncsafestrcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack...

CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...

CVE-2017-13728

There is an infinite loop in the nextchar function in compscan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack...

CVE-2017-13732

There is an illegal address access in the function dumpuses in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13729

There is an illegal address access in the ncsavestr function in allocentry.c in ncurses 6.0. It will lead to a remote denial of service attack...

ncurses -- multiple issues

ncurses developers reports: There are multiple illegal address access issues and an infinite loop issue. Please refer to the CVE list for details...

openSUSE Security Update : ncurses (openSUSE-2017-920)

This update for ncurses fixes the following issues : Security issues fixed : - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to...

SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2017:2075-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to...

SUSE SLES11 Security Update : ncurses (SUSE-SU-2017:2076-1)

This update for ncurses fixes the following issues: Security issues fixed : - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to...

Important Photon OS Security Update - PHSA-2017-0054

Updates of 'ncurses' packages of Photon OS have been released...

SUSE-SU-2017:2075-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issues fixed: - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to avo...

SUSE-SU-2017:2076-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issues fixed: - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to avo...

CVE-2017-11112

In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the appendacs function of tinfo/parseentry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data...

CVE-2017-10685

In ncurses 6.0, there is a format string vulnerability in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

CVE-2017-10684

In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...