Vulnerability Description
The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2lib patch. This affects Linux Kernel version 4.11.5 and earlier. This is a different issue than CVE-2017-1000371. This issue appears to be limited to i386 based systems.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.1, < 4.1.43 |
References
- http://www.debian.org/security/2017/dsa-3981Third Party Advisory
- http://www.securityfocus.com/bid/99149Third Party AdvisoryVDB Entry
- https://access.redhat.com/security/cve/CVE-2017-1000370Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42273/Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42274/Third Party AdvisoryVDB Entry
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtThird Party Advisory
- http://www.debian.org/security/2017/dsa-3981Third Party Advisory
- http://www.securityfocus.com/bid/99149Third Party AdvisoryVDB Entry
- https://access.redhat.com/security/cve/CVE-2017-1000370Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42273/Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42274/Third Party AdvisoryVDB Entry
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtThird Party Advisory
FAQ
What is CVE-2017-1000370?
CVE-2017-1000370 is a vulnerability with a CVSS score of 7.8 (HIGH). The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address ...
How severe is CVE-2017-1000370?
CVE-2017-1000370 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-1000370?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.