PT-2017-3250 · Gnu+1 · Libffi+1

Published 2017-06-19 · Updated 2023-09-22 · CVE-2017-1000376

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libffi versions prior to 3.1

Description The issue is caused by libffi requesting an executable stack, allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. This is due to a buffer overflow operation in memory, which can be exploited by a local attacker to execute arbitrary code on 32-bit x86 systems, specifically on the i386 architecture, by forcing the stack to be executable.

Recommendations For libffi versions prior to 3.1, update to version 3.1 or later to resolve the issue. As a temporary workaround, consider disabling the executable stack feature until a patch is available. Restrict access to libffi on 32-bit x86 systems to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2018-00006

CVE-2017-1000376

DLA-997-1

DSA-3889-1

ECHO-284D-D78F-39DB

MGASA-2017-0201

SUSE-SU-2018:0300-1

USN-3454-1

USN-3454-2

Affected Products

Ubuntu

Libffi

References · 32

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000376 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-1000376 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0201.html · Security Note
• https://osv.dev/vulnerability/USN-3454-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3454-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00006 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000376 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-1000376 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000376 · Security Note
• http://debian.org/security/2017/dsa-3889 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-1000376 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:0300-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0201 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3889-1 · Vendor Advisory