PT-2017-11436 · Gnu+2 · Ncurses+2
Publicado
2017-06-29
·
Atualizado
2022-05-26
·
CVE-2017-10684
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ncurses version 6.0
Description
The issue is related to a stack-based buffer overflow in the
fmt entry function. This can be exploited with a crafted input, potentially leading to a remote arbitrary code execution attack.Recommendations
For ncurses version 6.0, update to a version that fixes the buffer overflow issue in the
fmt entry function to prevent remote arbitrary code execution attacks.Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse
Ubuntu
Ncurses