vulnerability

Ubuntu: USN-5448-1 (CVE-2017-10684): ncurses vulnerabilities

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Jun 29, 2017
Added
May 27, 2022
Modified
Mar 27, 2026

Description

In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

Solutions

ubuntu-pro-upgrade-lib32ncurses5ubuntu-pro-upgrade-lib32ncursesw5ubuntu-pro-upgrade-lib32tinfo5ubuntu-pro-upgrade-lib64ncurses5ubuntu-pro-upgrade-lib64tinfo5ubuntu-pro-upgrade-libncurses5ubuntu-pro-upgrade-libncursesw5ubuntu-pro-upgrade-libtinfo5ubuntu-pro-upgrade-libx32ncurses5ubuntu-pro-upgrade-libx32ncursesw5ubuntu-pro-upgrade-libx32tinfo5ubuntu-pro-upgrade-ncurses-baseubuntu-pro-upgrade-ncurses-binubuntu-pro-upgrade-ncurses-term
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.