CVE search · CVE-2017-1000375
CVE-2017-1000375
critical 9.8
NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-119
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.0 | critical 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
| CVSS 2.0 | high 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- netbsd · netbsd
References
- http://www.securityfocus.com/bid/99257Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42272/
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtExploitThird Party Advisory
- http://www.securityfocus.com/bid/99257Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42272/
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtExploitThird Party Advisory