CVE-2017-1000375: Buffer Overflow
Published Jun 19, 2017
·Updated
NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions.
Affected Software
1 affected component
NetBSD NetBSD<=7.1
Event History
Jun 19, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-1000375?
CVE-2017-1000375 has a high severity as it allows attackers to manipulate memory leading to arbitrary code execution.
2
How do I fix CVE-2017-1000375?
To fix CVE-2017-1000375, update to a version of NetBSD later than 7.1 that addresses this vulnerability.
3
What systems are affected by CVE-2017-1000375?
CVE-2017-1000375 affects NetBSD 7.1 and possibly earlier versions.
4
What is the nature of the vulnerability described in CVE-2017-1000375?
CVE-2017-1000375 is a memory manipulation vulnerability caused by improper mapping of the run-time link-editor.
5
Can CVE-2017-1000375 be exploited remotely?
Yes, CVE-2017-1000375 can potentially be exploited remotely, which increases its risk.