CVEvulnerability
CVE-2017-1000364
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-06-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.4 HIGH — CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).
Affected configurations
• linux linux kernel (<= 4.11.5)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.debian.org/security/2017/dsa-3886 www.debian.org
- http://www.securityfocus.com/bid/99130 Issue Tracking, VDB Entry
- http://www.securitytracker.com/id/1038724 www.securitytracker.com
- https://access.redhat.com/errata/RHSA-2017:1482 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1483 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1484 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1485 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1486 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1487 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1488 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1489 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1490 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1491 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1567 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1616 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1647 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1712 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2017-1000364 Third Party Advisory, VDB Entry
- https://kc.mcafee.com/corporate/index?page=content&id=SB10205 kc.mcafee.com
- https://kc.mcafee.com/corporate/index?page=content&id=SB10207 kc.mcafee.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us support.hpe.com
- https://www.exploit-db.com/exploits/45625/ www.exploit-db.com
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt Third Party Advisory
- https://www.suse.com/security/cve/CVE-2017-1000364/ Third Party Advisory
- https://www.suse.com/support/kb/doc/?id=7020973 Third Party Advisory
- http://www.debian.org/security/2017/dsa-3886 www.debian.org
- http://www.securityfocus.com/bid/99130 Issue Tracking, VDB Entry
- http://www.securitytracker.com/id/1038724 www.securitytracker.com
- https://access.redhat.com/errata/RHSA-2017:1482 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1483 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1484 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1485 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1486 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1487 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1488 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1489 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1490 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1491 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1567 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1616 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1647 access.redhat.com
- https://access.redhat.com/errata/RHSA-2017:1712 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2017-1000364 Third Party Advisory, VDB Entry
- https://kc.mcafee.com/corporate/index?page=content&id=SB10205 kc.mcafee.com
- https://kc.mcafee.com/corporate/index?page=content&id=SB10207 kc.mcafee.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us support.hpe.com
- https://www.exploit-db.com/exploits/45625/ www.exploit-db.com
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt Third Party Advisory
- https://www.suse.com/security/cve/CVE-2017-1000364/ Third Party Advisory
- https://www.suse.com/support/kb/doc/?id=7020973 Third Party Advisory