SUSE-SU-2018:0284-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0284-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2018:0284-1
- Related
- Published
- 2018-01-30T09:54:08Z
- Modified
- 2018-01-30T09:54:08Z
- Summary
- Security update for ncurses
- Details
-
This update for ncurses fixes several issues.
These security issues were fixed:
- CVE-2017-13734: Prevent illegal address access in the ncsafe_strcat function in strings.c that might have lead to a remote denial of service attack (bsc#1056126).
- CVE-2017-13733: Prevent illegal address access in the fmtentry function in progs/dumpentry.c that might have lead to a remote denial of service attack (bsc#1056127).
- CVE-2017-13732: Prevent illegal address access in the function dumpuses() in progs/dumpentry.c that might have lead to a remote denial of service attack (bsc#1056128).
- CVE-2017-13731: Prevent illegal address access in the function postprocesstermcap() in parseentry.c that might have lead to a remote denial of service attack (bsc#1056129).
- CVE-2017-13730: Prevent illegal address access in the function ncreadentrysource() in progs/tic.c that might have lead to a remote denial of service attack (bsc#1056131).
- CVE-2017-13729: Prevent illegal address access in the ncsavestr function in allocentry.c that might have lead to a remote denial of service attack (bsc#1056132).
- CVE-2017-13728: Prevent infinite loop in the nextchar function in compscan.c that might have lead to a remote denial of service attack (bsc#1056136).
- References
-
- https://www.suse.com/support/update/announcement/2018/suse-su-20180284-1/
- https://bugzilla.suse.com/1056126
- https://bugzilla.suse.com/1056127
- https://bugzilla.suse.com/1056128
- https://bugzilla.suse.com/1056129
- https://bugzilla.suse.com/1056131
- https://bugzilla.suse.com/1056132
- https://bugzilla.suse.com/1056136
- https://www.suse.com/security/cve/CVE-2017-13728
- https://www.suse.com/security/cve/CVE-2017-13729
- https://www.suse.com/security/cve/CVE-2017-13730
- https://www.suse.com/security/cve/CVE-2017-13731
- https://www.suse.com/security/cve/CVE-2017-13732
- https://www.suse.com/security/cve/CVE-2017-13733
- https://www.suse.com/security/cve/CVE-2017-13734
Affected packages
SUSE:Linux Enterprise Desktop 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2
SUSE:Linux Enterprise Desktop 12 SP3 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2
SUSE:Linux Enterprise Software Development Kit 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2
SUSE:Linux Enterprise Software Development Kit 12 SP3 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
SUSE:Linux Enterprise Server 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.9-58.1
Ecosystem specific
{
"binaries": [
{
"libncurses6-32bit": "5.9-58.1",
"tack": "5.9-58.1",
"ncurses-devel-32bit": "5.9-58.1",
"terminfo": "5.9-58.1",
"terminfo-base": "5.9-58.1",
"libncurses6": "5.9-58.1",
"ncurses-devel": "5.9-58.1",
"ncurses-utils": "5.9-58.1",
"libncurses5-32bit": "5.9-58.1",
"libncurses5": "5.9-58.1"
}
]
}
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.9-58.1
Ecosystem specific
{
"binaries": [
{
"libncurses6-32bit": "5.9-58.1",
"tack": "5.9-58.1",
"ncurses-devel-32bit": "5.9-58.1",
"terminfo": "5.9-58.1",
"terminfo-base": "5.9-58.1",
"libncurses6": "5.9-58.1",
"ncurses-devel": "5.9-58.1",
"ncurses-utils": "5.9-58.1",
"libncurses5-32bit": "5.9-58.1",
"libncurses5": "5.9-58.1"
}
]
}
SUSE:Linux Enterprise Server 12 SP3 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.9-58.1
Ecosystem specific
{
"binaries": [
{
"libncurses6-32bit": "5.9-58.1",
"tack": "5.9-58.1",
"ncurses-devel-32bit": "5.9-58.1",
"terminfo": "5.9-58.1",
"terminfo-base": "5.9-58.1",
"libncurses6": "5.9-58.1",
"ncurses-devel": "5.9-58.1",
"ncurses-utils": "5.9-58.1",
"libncurses5-32bit": "5.9-58.1",
"libncurses5": "5.9-58.1"
}
]
}
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.9-58.1
Ecosystem specific
{
"binaries": [
{
"libncurses6-32bit": "5.9-58.1",
"tack": "5.9-58.1",
"ncurses-devel-32bit": "5.9-58.1",
"terminfo": "5.9-58.1",
"terminfo-base": "5.9-58.1",
"libncurses6": "5.9-58.1",
"ncurses-devel": "5.9-58.1",
"ncurses-utils": "5.9-58.1",
"libncurses5-32bit": "5.9-58.1",
"libncurses5": "5.9-58.1"
}
]
}