PT-2017-10955 · Pax · Pax Linux Kernel

Publicado 2017-06-19 · Atualizado 2017-07-05 · CVE-2017-1000377

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PAX Linux Kernel (affected versions not specified)

Description An issue was discovered in the size of the default stack guard page on PAX Linux. The default stack guard page is not sufficiently large and can be bypassed. This issue affects PAX Linux Kernel versions as of June 19, 2017.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-1000377

Produtos afetados

Pax Linux Kernel

Referências · 5

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• http://securityfocus.com/bid/99129 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000377 · Nota de Segurança
• https://qualys.com/2017/06/19/stack-clash/stack-clash.txt · Nota
• https://access.redhat.com/security/cve/CVE-2017-1000377 · Nota