1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
Candidate: CVE-2017-11113
PublicDate: 2017-07-08
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11113
Description:
In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry
function of tinfo/parse_entry.c. It could lead to a remote denial of
service attack if the terminfo library code is used to process untrusted
terminfo data.
Ubuntu-Description:
Notes:
Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1464691
Priority: low
Discovered-by:
Assigned-to:
Patches_ncurses:
upstream_ncurses: released (6.0+20170701-1)
precise/esm_ncurses: needed
trusty_ncurses: needed
vivid/ubuntu-core_ncurses: needed
xenial_ncurses: needed
yakkety_ncurses: ignored (reached end-of-life)
zesty_ncurses: needed
devel_ncurses: needed
|