ALPINE-CVE-2017-10684

See a problem?
Please try reporting it to the source first.

Source

https://security.alpinelinux.org/vuln/CVE-2017-10684

Import Source

https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json

JSON Data

https://api.osv.dev/v1/vulns/ALPINE-CVE-2017-10684

Upstream

CVE-2017-10684

Published

2017-06-29T23:29:00.223Z

Modified

2025-12-03T22:39:18.635783Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

References

https://security.alpinelinux.org/vuln/CVE-2017-10684

Affected packages

Alpine:v3.10

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.11

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.12

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.13

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.14

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.15

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.16

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.17

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.18

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.19

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.20

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.21

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.22

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.23

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.3

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0-r7

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.4

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0-r8

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.5

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0-r8

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.6

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0-r8

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.7

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.8

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"

Alpine:v3.9

ncurses

Package

Name: ncurses
Purl: pkg:apk/alpine/ncurses?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0_p20170701-r0

Affected versions

5.*

5.6-r0

5.7-r0

5.7-r1

5.7-r2

5.7-r3

5.7-r4

5.8-r0

5.8-r1

5.8-r2

5.9-r0

5.9-r1

5.9-r2

5.9-r3

5.9-r4

6.*

6.0-r0

6.0-r1

6.0-r2

6.0-r3

6.0-r4

6.0-r5

6.0-r6

6.0-r7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2017-10684.json"