Vulnerabilities > GNU > Ncurses > Critical

DATE CVE VULNERABILITY TITLE RISK
2017-06-29 CVE-2017-10684 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GNU Ncurses 6.0
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function.
network
low complexity
gnu CWE-119
critical
9.8
2017-06-29 CVE-2017-10685 Use of Externally-Controlled Format String vulnerability in GNU Ncurses 6.0
In ncurses 6.0, there is a format string vulnerability in the fmt_entry function.
network
low complexity
gnu CWE-134
critical
9.8