CVE-2017-1000370: Input Validation
A flaw was found in the Linux kernel where execution of a PIE binary could allow for an attacker to corrupt memory or match priviledges of accessible setuid binaries on a system.
This is a different issue than CVE-2017-1000371
Other sources
The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2lib patch. This affects Linux Kernel version 4.11.5 and earlier. This is a different issue than CVE-2017-1000371. This issue appears to be limited to i386 based systems.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1000370?
CVE-2017-1000370 has a high severity level due to the potential for memory corruption and privilege escalation.
How do I fix CVE-2017-1000370?
To mitigate CVE-2017-1000370, it is recommended to upgrade to patched versions of the Linux kernel listed in the vulnerability report.
What systems are affected by CVE-2017-1000370?
CVE-2017-1000370 affects various versions of the Linux kernel, specifically those prior to the patched versions.
Is CVE-2017-1000370 a critical vulnerability?
CVE-2017-1000370 is considered critical due to the ability of an attacker to escalate privileges on a system.
What are the potential impacts of CVE-2017-1000370?
The potential impacts of CVE-2017-1000370 include unauthorized access to sensitive data and system compromise.