CVE-2017-10684
Not yet rated
Description
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
Metrics
- EPSS — exploit probability
- 5% (percentile: 92) as of 2 November 2026
- CWE
- CWE-119
Affected products
invisible-island: ncurses
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1464687 Issue Tracking
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e…
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb…
- https://security.gentoo.org/glsa/201804-13
- https://bugzilla.redhat.com/show_bug.cgi?id=1464687 Issue Tracking
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e…
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb…
- https://security.gentoo.org/glsa/201804-13