← Volver a CVEs
CVE-2017-10685
N/ADescripcion
In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado6/29/2017
Ultima modificacion4/20/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
gnu:ncurses
Debilidades (CWE)
CWE-134
Referencias
https://bugzilla.redhat.com/show_bug.cgi?id=1464692(cve@mitre.org)
https://security.gentoo.org/glsa/201804-13(cve@mitre.org)
https://bugzilla.redhat.com/show_bug.cgi?id=1464692(af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/201804-13(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.