Vulnerability CVE-2017-1000374
Published: 2017-06-19

Description:
A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions.

Type:

CWE-noinfo

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Netbsd -> Netbsd 

 References:
http://www.securityfocus.com/bid/99176
https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
Copyright 2024, cxsecurity.com

 

Back to Top