CVE-2017-10685: ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

Severity: Critical

CVSS Score: 9.8

In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.