PT-2017-2281 · Linux+5 · Linux Kernel+5
Publicado
2017-06-18
·
Atualizado
2018-10-18
·
CVE-2017-1000364
CVSS v3.1
7.4
Alta
| Vetor | AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions prior to 4.11.5
Description
The issue is related to the implementation of the Stack Guard-Page mechanism in the Linux kernel, which can be exploited by moving the stack pointer to a different memory area without affecting the guard page. This can allow a local attacker to cause a denial of service (memory corruption). The problem is associated with the size of the stack guard page, which is not sufficiently large and can be bypassed.
Recommendations
For Linux Kernel versions prior to 4.11.5, update to a version that includes the necessary security patches to address the stack guard page issue.
Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu