CVE-2017-1000375

Critical

Published: 19/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, allowing attackers to more easily manipulate memory leading to arbitrary code execution.

Risk Assessment

This vulnerability increases the risk of arbitrary code execution by attackers, potentially leading to serious security breaches in the system.

Recommendation

It is recommended to upgrade to a newer version of NetBSD to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions.