Skip to content
COOEY

EXPOSURES › CVE-2017-10684

CVE-2017-10684

CRITICAL
DETAIL
SourceNVD · cve Published2017-06-29 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-10684 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
invisible-island · vendorncurses · product
DESCRIPTION

In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -1.00
…
cooey ↗ severe-fallout -1.00
…
"…"
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.