CVE Catalog
CVE-2017-1000374
CriticalSummary
A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions.
Risk Assessment
This vulnerability may lead to unauthorized system access and execution of malicious code, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to the latest version of NetBSD to mitigate this vulnerability and to monitor the use of setuid binaries in the system.
Original NVD description (English source)
A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions.