MGASA-2018-0001

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0001.html

Import Source

https://advisories.mageia.org/MGASA-2018-0001.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2018-0001

Related

Published

2018-01-01T01:17:34Z

Modified

2018-01-01T00:51:25Z

Summary

Updated ncurses packages fix security vulnerabilities

Details

Possible RCE via stack-based buffer overflow in the fmt_entry function (CVE-2017-10684).

Possible RCE with format string vulnerability in the fmt_entry function (CVE-2017-10685).

Illegal address access in append_acs (CVE-2017-11112).

Dereferencing NULL pointer in ncparse_entry (CVE-2017-11113).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.9-21.1.mga5

{
    "section": "core"
}