1. Home
  2. CVE Database
  3. CVE-2017-1000375
CRITICAL · 9.8

CVE-2017-1000375

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This af...

Vulnerability Description

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetbsdNetbsd<= 7.1

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2017-1000375?

CVE-2017-1000375 is a vulnerability with a CVSS score of 9.8 (CRITICAL). NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This af...

How severe is CVE-2017-1000375?

CVE-2017-1000375 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2017-1000375?

Check the references section above for vendor advisories and patch information. Affected products include: Netbsd Netbsd.