Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function     (CVE-2017-10685)

  - In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11112)

  - In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11113)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function     (CVE-2017-10685)

  - In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11112)

  - In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11113)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function     (CVE-2017-10685)

  - In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will     lead to a remote arbitrary code execution attack. (CVE-2017-10684)

  - In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of     tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is     used to process untrusted terminfo data. (CVE-2017-11112)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

This update for ncurses fixes the following issues :

Security issue fixed :

CVE-2018-10754: Fixed a denial of service caused by a NULL pointer Dereference in the _nc_parse_entry() (bsc#1131830).

CVE-2019-17594: Fixed a heap-based buffer over-read in _nc_find_entry function in tinfo/comp_hash.c (bsc#1154036).

CVE-2019-17595: Fixed a heap-based buffer over-read in fmt_entry function in tinfo/comp_hash.c (bsc#1154037).

Bug fixes: Fixed ppc64le build configuration (bsc#1134550).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the ncurses package has been released.

Security fix for CVE-2018-10754.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A NULL pointer dereference was found in the way the
    _nc_parse_entry function parses terminfo data for     compilation. An attacker able to provide specially     crafted terminfo data could use this flaw to crash the     application parsing it.(CVE-2018-10754)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A NULL pointer dereference was found in the way the
    _nc_parse_entry function parses terminfo data for     compilation. An attacker able to provide specially     crafted terminfo data could use this flaw to crash the     application parsing it.(CVE-2018-10754)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A NULL pointer dereference was found in the way the _nc_parse_entry function parses terminfo data for compilation. An attacker able to provide specially crafted terminfo data could use this flaw to crash the application parsing it.(CVE-2018-10754)

ID	Name	Product	Family	Severity
198984	RHEL 6 : ncurses (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198914	RHEL 5 : ncurses (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198896	RHEL 7 : ncurses (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196719	RHEL 7 : ncurses (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196713	RHEL 5 : ncurses (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196707	RHEL 6 : ncurses (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
131555	SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2019:3094-1)	Nessus	SuSE Local Security Checks	medium
121968	Photon OS 2.0: Ncurses PHSA-2018-2.0-0074	Nessus	PhotonOS Local Security Checks	low
121858	Photon OS 1.0: Ncurses PHSA-2018-1.0-0164	Nessus	PhotonOS Local Security Checks	high
120884	Fedora 28 : ncurses (2018-ed74f27aef)	Nessus	Fedora Local Security Checks	high
118426	EulerOS Virtualization 2.5.0 : ncurses (EulerOS-SA-2018-1338)	Nessus	Huawei Local Security Checks	high
117430	EulerOS Virtualization 2.5.2 : ncurses (EulerOS-SA-2018-1276)	Nessus	Huawei Local Security Checks	high
111645	EulerOS 2.0 SP3 : ncurses (EulerOS-SA-2018-1225)	Nessus	Huawei Local Security Checks	high
111607	Amazon Linux 2 : ncurses (ALAS-2018-1053)	Nessus	Amazon Linux Local Security Checks	high
110882	EulerOS 2.0 SP2 : ncurses (EulerOS-SA-2018-1218)	Nessus	Huawei Local Security Checks	high
110251	Fedora 27 : ncurses (2018-6c01a593b0)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2018-10754

No Score

Tenable Plugins

critical

critical

critical

critical

critical

critical

medium

low

high

high

high

high

high

high

high

high