ALPINE-CVE-2017-10684 PUBLISHED CVSS 9.800000190734863 CRITICAL

In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

Risk Scores

CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.9ncurses6.0-r7, 0, 5.7-r0
Alpine:v3.4ncurses0, 5.6-r0, 5.7-r0
Alpine:v3.21ncurses6.0-r7, 6.0-r6, 6.0-r5
Alpine:v3.7ncurses0, 6.0-r7, 6.0-r6
Alpine:v3.12ncurses6.0-r4, 6.0-r7, 6.0-r6
Alpine:v3.23ncurses5.6-r0, 5.7-r0, 5.7-r1
Alpine:v3.15ncurses5.9-r3, 0, 5.6-r0
Alpine:v3.14ncurses6.0-r7, 0, 5.6-r0
Alpine:v3.20ncurses5.7-r1, 6.0-r7, 6.0-r6
Alpine:v3.16ncurses6.0-r7, 0, 5.6-r0
Alpine:v3.11ncurses6.0-r7, 5.6-r0, 5.7-r0
Alpine:v3.18ncurses0, 6.0-r7, 6.0-r6
Alpine:v3.5ncurses6.0-r7, 5.9-r3, 5.9-r2
Alpine:v3.8ncurses0, 6.0-r7, 6.0-r6
Alpine:v3.19ncurses0, 6.0-r7, 6.0-r6
Alpine:v3.22ncurses5.9-r0, 0, 5.6-r0
Alpine:v3.17ncurses0, 5.7-r0, 5.7-r3
Alpine:v3.6ncurses6.0-r2, 6.0-r3, 6.0-r4
Alpine:v3.13ncurses5.7-r4, 5.7-r0, 5.7-r1
Alpine:v3.10ncurses5.6-r0, 5.8-r2, 5.8-r1

…and 1 more

Timeline

References

Open in Interactive Console →