CVE-2017-1000364

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).

CVSS v3.0

7.4 HIGHCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.2 MEDIUMAV:L/AC:H/Au:N/C:C/I:C/A:C

EPSS

5.19% chance of exploitation in the next 30 days, 92th percentile

Published

2017-06-19

Updated

2024-08-05

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/rsh_stack_clash_pr…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/45625

References

• CVE Record
• NVD entry

Related

• CVE-2017-1000353
• CVE-2017-1000366
• CVE-2017-1000254
• CVE-2017-1000367
• CVE-2017-1000253
• CVE-2017-1000368