Vulnerability CVE-2017-1000364

Vulnerability CVE-2017-1000364

Published: 2017-06-19

Description:

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:L/AC:H/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.2/10	10/10	1.9/10

Exploit range	Attack complexity	Authentication
Local	High	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Linux -> Linux kernel

References:

http://www.debian.org/security/2017/dsa-3886

http://www.securityfocus.com/bid/99130

http://www.securitytracker.com/id/1038724

https://access.redhat.com/errata/RHSA-2017:1482

https://access.redhat.com/errata/RHSA-2017:1483

https://access.redhat.com/errata/RHSA-2017:1484

https://access.redhat.com/errata/RHSA-2017:1485

https://access.redhat.com/errata/RHSA-2017:1486

https://access.redhat.com/errata/RHSA-2017:1487

https://access.redhat.com/errata/RHSA-2017:1488

https://access.redhat.com/errata/RHSA-2017:1489

https://access.redhat.com/errata/RHSA-2017:1490

https://access.redhat.com/errata/RHSA-2017:1491

https://access.redhat.com/errata/RHSA-2017:1567

https://access.redhat.com/errata/RHSA-2017:1616

https://access.redhat.com/errata/RHSA-2017:1647

https://access.redhat.com/errata/RHSA-2017:1712

https://access.redhat.com/security/cve/CVE-2017-1000364

https://kc.mcafee.com/corporate/index?page=content&id=SB10205

https://kc.mcafee.com/corporate/index?page=content&id=SB10207

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us

https://www.exploit-db.com/exploits/45625/

https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

https://www.suse.com/security/cve/CVE-2017-1000364/

https://www.suse.com/support/kb/doc/?id=7020973

Vulnerability CVE-2017-1000364

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).

CWE-119

CVSS2 => (AV:L/AC:H/Au:N/C:C/I:C/A:C)

6.2/10

10/10

1.9/10

Local

High

No required

Complete

Complete

Complete

Affected software

References: