PT-2017-10955 · Pax · Pax Linux Kernel

Published 2017-06-19 · Updated 2017-07-05 · CVE-2017-1000377

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PAX Linux Kernel (affected versions not specified)

Description An issue was discovered in the size of the default stack guard page on PAX Linux. The default stack guard page is not sufficiently large and can be bypassed. This issue affects PAX Linux Kernel versions as of June 19, 2017.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-1000377

Affected Products

Pax Linux Kernel

References · 5

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000377 · Security Note
• http://securityfocus.com/bid/99129 · Note
• https://qualys.com/2017/06/19/stack-clash/stack-clash.txt · Note
• https://access.redhat.com/security/cve/CVE-2017-1000377 · Note