CVE search · CVE-2017-1000374
CVE-2017-1000374
critical 9.8
A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- NVD-CWE-noinfo
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.0 | critical 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
| CVSS 2.0 | high 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- netbsd · netbsd
References
- http://www.securityfocus.com/bid/99176Third Party AdvisoryVDB Entry
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtMailing ListThird Party Advisory
- http://www.securityfocus.com/bid/99176Third Party AdvisoryVDB Entry
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtMailing ListThird Party Advisory