CVE-2017-10684 in GNU and Canonical Products
Published on June 29, 2017
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
Products Associated with CVE-2017-10684
stack.watch emails you whenever new vulnerabilities are published in GNU Ncurses or Canonical Ubuntu Linux. Just hit a watch button to start following.
Exploit Probability
EPSS
3.18%
Percentile
86.85%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.