suse · CVE-2017-13729

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-13729 severity moderate: SUSE including 73 source package names (0.9.1:libncurses5-5.9-58.1, 0.9.1:libncurses6-5.9-58.1, …), 319 product×package rows across 59 product lines (Container caasp/v4/default-http-backend, Container caasp/v4/dnsmasq-nanny, … (59 product lines)): Fixed 319.

Description:

There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.