Security fix for CVE-2018-10754.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A NULL pointer dereference was found in the way the _nc_parse_entry function parses terminfo data for compilation. An attacker able to provide specially crafted terminfo data could use this flaw to crash the application parsing it.(CVE-2018-10754)

According to the version of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A NULL pointer dereference was found in the way the
    _nc_parse_entry function parses terminfo data for     compilation. An attacker able to provide specially     crafted terminfo data could use this flaw to crash the     application parsing it.(CVE-2018-10754)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A NULL pointer dereference was found in the way the
    _nc_parse_entry function parses terminfo data for     compilation. An attacker able to provide specially     crafted terminfo data could use this flaw to crash the     application parsing it.(CVE-2018-10754)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the ncurses package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn     by its CNA. Further investigation showed that it was not a security issue. Notes: none (CVE-2018-10754)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of 'ncurses' packages of Photon OS has been released.

An update of 'ncurses', 'strongswan' packages of Photon OS has been released.

This update for ncurses fixes the following issues :

Security issue fixed :

CVE-2018-10754: Fixed a denial of service caused by a NULL pointer Dereference in the _nc_parse_entry() (bsc#1131830).

CVE-2019-17594: Fixed a heap-based buffer over-read in _nc_find_entry function in tinfo/comp_hash.c (bsc#1154036).

CVE-2019-17595: Fixed a heap-based buffer over-read in fmt_entry function in tinfo/comp_hash.c (bsc#1154037).

Bug fixes: Fixed ppc64le build configuration (bsc#1134550).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
110251	Fedora 27 : ncurses (2018-6c01a593b0)	Nessus	Fedora Local Security Checks	5/31/2018	9/27/2024	high
120884	Fedora 28 : ncurses (2018-ed74f27aef)	Nessus	Fedora Local Security Checks	1/3/2019	1/6/2021	high
111607	Amazon Linux 2 : ncurses (ALAS-2018-1053)	Nessus	Amazon Linux Local Security Checks	8/10/2018	8/23/2024	high
110882	EulerOS 2.0 SP2 : ncurses (EulerOS-SA-2018-1218)	Nessus	Huawei Local Security Checks	7/3/2018	9/6/2024	high
111645	EulerOS 2.0 SP3 : ncurses (EulerOS-SA-2018-1225)	Nessus	Huawei Local Security Checks	8/10/2018	8/22/2024	high
118426	EulerOS Virtualization 2.5.0 : ncurses (EulerOS-SA-2018-1338)	Nessus	Huawei Local Security Checks	10/26/2018	2/3/2022	high
121858	Photon OS 1.0: Ncurses PHSA-2018-1.0-0164	Nessus	PhotonOS Local Security Checks	2/7/2019	4/19/2021	high
221550	Linux Distros Unpatched Vulnerability : CVE-2018-10754	Nessus	Misc.	3/4/2025	3/4/2025	low
117430	EulerOS Virtualization 2.5.2 : ncurses (EulerOS-SA-2018-1276)	Nessus	Huawei Local Security Checks	9/12/2018	8/8/2024	high
121968	Photon OS 2.0: Ncurses PHSA-2018-2.0-0074	Nessus	PhotonOS Local Security Checks	2/7/2019	7/22/2024	low
111958	Photon OS 2.0: Ncurses PHSA-2018-2.0-0074 (deprecated)	Nessus	PhotonOS Local Security Checks	8/17/2018	2/7/2019	high
111944	Photon OS 1.0: Ncurses / Strongswan PHSA-2018-1.0-0164 (deprecated)	Nessus	PhotonOS Local Security Checks	8/17/2018	2/7/2019	high
131555	SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2019:3094-1)	Nessus	SuSE Local Security Checks	12/3/2019	4/8/2024	medium

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

low

high

low

high

high

medium