CVE-2017-1000379

High

Published: 19/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack.

Risk Assessment

Attackers may exploit this vulnerability to manipulate the stack, potentially leading to arbitrary code execution or privilege escalation.

Recommendation

It is recommended to update the Linux kernel to a version that is not vulnerable to this flaw to minimize the risk of attacks.

Other vulnerabilities in Linux Kernel version 4.11.5

CVE-2017-1000371High
The offset2lib patch used by the Linux Kernel contains a vulnerability that occurs when RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated. As a result, the stack may grow to 0x80000000, allowing an attacker to jump over the stack guard page.

Original NVD description (English source)

The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected.