PT-2017-10954 · Openbsd · Openbsd

Published 2017-06-19 · Updated 2017-10-24 · CVE-2017-1000373

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenBSD versions 6.1 and earlier

Description The issue concerns the qsort() function in OpenBSD, which is recursive and not randomized. An attacker can create a specific input array that causes the function to recurse a certain number of times, allowing for the consumption of arbitrary amounts of stack memory. This can be used to manipulate stack memory and potentially execute arbitrary code.

Recommendations For OpenBSD version 6.1 and earlier, consider applying a patch or updating to a newer version that addresses this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2017-1000373

Affected Products

Openbsd

References · 12

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://exploit-db.com/exploits/42271 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000373 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000373 · Vendor Advisory
• https://support.apple.com/HT208115 · Note
• https://support.apple.com/HT208144 · Note
• https://qualys.com/2017/06/19/stack-clash/stack-clash.txt · Note
• https://support.apple.com/HT208113 · Note
• http://securityfocus.com/bid/99177 · Note
• http://securitytracker.com/id/1039427 · Note
• https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/qsort.c?rev=1.15&content-type=text/x-cvsweb-markup · Note
• https://support.apple.com/HT208112 · Note