PT-2017-10954 · Openbsd · Openbsd

Publicado 2017-06-19 · Atualizado 2017-10-24 · CVE-2017-1000373

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenBSD versions 6.1 and earlier

Description The issue concerns the qsort() function in OpenBSD, which is recursive and not randomized. An attacker can create a specific input array that causes the function to recurse a certain number of times, allowing for the consumption of arbitrary amounts of stack memory. This can be used to manipulate stack memory and potentially execute arbitrary code.

Recommendations For OpenBSD version 6.1 and earlier, consider applying a patch or updating to a newer version that addresses this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2017-1000373

Produtos afetados

Openbsd

Referências · 12

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://exploit-db.com/exploits/42271 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000373 · Nota de Segurança
• https://support.apple.com/HT208115 · Nota
• https://osv.dev/vulnerability/CVE-2017-1000373 · Aviso do Fabricante
• https://support.apple.com/HT208144 · Nota
• https://qualys.com/2017/06/19/stack-clash/stack-clash.txt · Nota
• https://support.apple.com/HT208113 · Nota
• http://securityfocus.com/bid/99177 · Nota
• http://securitytracker.com/id/1039427 · Nota
• https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/qsort.c?rev=1.15&content-type=text/x-cvsweb-markup · Nota
• https://support.apple.com/HT208112 · Nota