SUSE-SU-2018:0284-1

Dashboard / Vulnerabilities / SUSE-SU-2018:0284-1

SUSE-SU-2018:0284-1

Summary: Security update for ncurses

Details: This update for ncurses fixes several issues. These security issues were fixed: - CVE-2017-13734: Prevent illegal address access in the _nc_safe_strcat function in strings.c that might have lead to a remote denial of service attack (bsc#1056126). - CVE-2017-13733: Prevent illegal address access in the fmt_entry function in progs/dump_entry.c that might have lead to a remote denial of service attack (bsc#1056127). - CVE-2017-13732: Prevent illegal address access in the function dump_uses() in progs/dump_entry.c that might have lead to a remote denial of service attack (bsc#1056128). - CVE-2017-13731: Prevent illegal address access in the function postprocess_termcap() in parse_entry.c that might have lead to a remote denial of service attack (bsc#1056129). - CVE-2017-13730: Prevent illegal address access in the function _nc_read_entry_source() in progs/tic.c that might have lead to a remote denial of service attack (bsc#1056131). - CVE-2017-13729: Prevent illegal address access in the _nc_save_str function in alloc_entry.c that might have lead to a remote denial of service attack (bsc#1056132). - CVE-2017-13728: Prevent infinite loop in the next_char function in comp_scan.c that might have lead to a remote denial of service attack (bsc#1056136).

References: https://www.suse.com/support/update/announcement/2018/suse-su-20180284-1/, https://bugzilla.suse.com/1056126, https://bugzilla.suse.com/1056127, https://bugzilla.suse.com/1056128, https://bugzilla.suse.com/1056129, https://bugzilla.suse.com/1056131, https://bugzilla.suse.com/1056132, https://bugzilla.suse.com/1056136, https://www.suse.com/security/cve/CVE-2017-13728, https://www.suse.com/security/cve/CVE-2017-13729, https://www.suse.com/security/cve/CVE-2017-13730, https://www.suse.com/security/cve/CVE-2017-13731, https://www.suse.com/security/cve/CVE-2017-13732, https://www.suse.com/security/cve/CVE-2017-13733, https://www.suse.com/security/cve/CVE-2017-13734