CVE-2017-10684

CVE-2017-10684 affects the ncurses (new curses) library up to version 6.0, with a stack-based buffer overflow in fmt_entry that could allow a remote attacker to execute arbitrary code. The connected documents confirm the vulnerability context but do not provide a specific patch version or remedia...

CVE-2017-10685

CVE-2017-10685 affects the ncurses (new curses) library. The vulnerability is a format-string flaw in the fmt_entry function, allowing a remote authenticated attacker to potentially execute arbitrary code by supplying a crafted input. The IBM X-Force entry for this CVE lists a base score of 7.3 (...