CVE-2017-1000364: Buffer Overflow
A flaw was found in the way memory was being allocated on the stack for user space binaries. If heap (or different memory region) and stack memory regions were adjacent to each other, an attacker could use this flaw to jump over the stack gap, cause controlled memory corruption on process stack or the adjacent memory region, and thus increase their privileges on the system.
This is a tracking bug for the kernel part of the mitigation.
Upstream kernel patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1be7107fbe18eed3e319a6c3e83c78254b693acb
Other sources
A flaw was found in the way memory was being allocated on the stack for user space binaries. If heap (or different memory region) and stack memory regions were adjacent to each other, an attacker could use this flaw to jump over the stack guard gap, cause controlled memory corruption on process stack or the adjacent memory region, and thus increase their privileges on the system. This is a kernel-side mitigation which increases the stack guard gap size from one page to 1 MiB to make successful exploitation of this issue more difficult.
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2017-1000364?
CVE-2017-1000364 has a high severity due to potential unauthorized access to process memory.
How do I fix CVE-2017-1000364?
To fix CVE-2017-1000364, update to the recommended kernel versions provided by your distribution as indicated in the advisory.
What software is affected by CVE-2017-1000364?
CVE-2017-1000364 affects various versions of the Linux kernel across Red Hat and Debian distributions.
Can CVE-2017-1000364 lead to remote code execution?
Yes, CVE-2017-1000364 has the potential to allow remote code execution if successfully exploited.
Is CVE-2017-1000364 a local or remote vulnerability?
CVE-2017-1000364 is considered a local vulnerability, requiring valid user access to exploit.