PT-2017-11436
CVE-2017-10684
·
Published
2017-06-29
·
Updated
2026-10-01
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ncurses version 6.0
Description
The issue is related to a stack-based buffer overflow in the
fmt entry function. This can be exploited with a crafted input, potentially leading to a remote arbitrary code execution attack.Recommendations
For ncurses version 6.0, update to a version that fixes the buffer overflow issue in the
fmt entry function to prevent remote arbitrary code execution attacks. Found an issue in the description? Have something to add? Feel free to write us 👾