An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).

No CVSS v4.0

No CVSS v3.1

Attack Vector Local

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity High

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.09599.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Container Development Kit 3.0
cpe:/a:redhat:container_development_kit:3.0 RHSA-2017:1567 2017-06-21T00:00:00Z
Red Hat Enterprise Linux 5.9 Long Life
kernel-0:2.6.18-348.33.2.el5 cpe:/o:redhat:rhel_aus:5.9 RHSA-2017:1483 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 5 Extended Lifecycle Support
kernel-0:2.6.18-420.el5 cpe:/o:redhat:rhel_els:5 RHSA-2017:1482 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 6
kernel-0:2.6.32-696.3.2.el6 cpe:/o:redhat:enterprise_linux:6 RHSA-2017:1486 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 6.2 Advanced Update Support
kernel-0:2.6.32-220.72.2.el6 cpe:/o:redhat:rhel_mission_critical:6.2 RHSA-2017:1491 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 6.4 Advanced Update Support
kernel-0:2.6.32-358.79.2.el6 cpe:/o:redhat:rhel_aus:6.4 RHSA-2017:1490 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 6.5 Advanced Update Support
kernel-0:2.6.32-431.80.2.el6 cpe:/o:redhat:rhel_aus:6.5 RHSA-2017:1489 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 6.5 Telco Extended Update Support
kernel-0:2.6.32-431.80.2.el6 cpe:/o:redhat:rhel_tus:6.5 RHSA-2017:1489 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 6.6 Advanced Update Support
kernel-0:2.6.32-504.60.2.el6 cpe:/o:redhat:rhel_aus:6.6 RHSA-2017:1488 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 6.6 Telco Extended Update Support
kernel-0:2.6.32-504.60.2.el6 cpe:/o:redhat:rhel_tus:6.6 RHSA-2017:1488 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 6.7 Extended Update Support
kernel-0:2.6.32-573.42.2.el6 cpe:/o:redhat:rhel_eus:6.7 RHSA-2017:1487 2017-06-19T00:00:00Z
Red Hat Enterprise Linux 7
kernel-rt-0:3.10.0-514.26.1.rt56.442.el7 cpe:/a:redhat:rhel_extras_rt:7 RHSA-2017:1616 2017-06-28T00:00:00Z
kernel-0:3.10.0-514.21.2.el7 cpe:/o:redhat:enterprise_linux:7 RHSA-2017:1484 2017-06-20T00:00:00Z
Red Hat Enterprise Linux 7.2 Extended Update Support
kernel-0:3.10.0-327.55.2.el7 cpe:/o:redhat:rhel_eus:7.2 RHSA-2017:1485 2017-06-19T00:00:00Z
Red Hat Enterprise MRG 2
kernel-rt-1:3.10.0-514.rt56.228.el6rt cpe:/a:redhat:enterprise_mrg:2:server:el6 RHSA-2017:1647 2017-06-28T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Container Development Kit Subscribe
Enterprise Linux Subscribe
Enterprise Mrg Subscribe
Rhel Aus Subscribe
Rhel Els Subscribe
Rhel Eus Subscribe
Rhel Extras Rt Subscribe
Rhel Mission Critical Subscribe
Rhel Tus Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-1200-1 linux security update
Debian DLA Debian DLA DLA-993-1 linux security update
Debian DLA Debian DLA DLA-993-2 linux regression update
Debian DSA Debian DSA DSA-3886-1 linux security update
Debian DSA Debian DSA DSA-3886-2 linux regression update
EUVD EUVD EUVD-2017-1523 An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).
Ubuntu USN Ubuntu USN USN-3324-1 Linux kernel vulnerability
Ubuntu USN Ubuntu USN USN-3325-1 Linux kernel (Raspberry Pi 2) vulnerability
Ubuntu USN Ubuntu USN USN-3326-1 Linux kernel vulnerability
Ubuntu USN Ubuntu USN USN-3327-1 Linux kernel (Raspberry Pi 2) vulnerability
Ubuntu USN Ubuntu USN USN-3328-1 Linux kernel vulnerability
Ubuntu USN Ubuntu USN USN-3329-1 Linux kernel (GKE) vulnerability
Ubuntu USN Ubuntu USN USN-3330-1 Linux kernel (Qualcomm Snapdragon) vulnerability
Ubuntu USN Ubuntu USN USN-3331-1 Linux kernel (AWS) vulnerability
Ubuntu USN Ubuntu USN USN-3332-1 Linux kernel (Raspberry Pi 2) vulnerability
Ubuntu USN Ubuntu USN USN-3333-1 Linux kernel (HWE) vulnerability
Ubuntu USN Ubuntu USN USN-3334-1 Linux kernel (Xenial HWE) vulnerability
Ubuntu USN Ubuntu USN USN-3335-1 Linux kernel vulnerability
Ubuntu USN Ubuntu USN USN-3335-2 Linux kernel (Trusty HWE) vulnerability
Ubuntu USN Ubuntu USN USN-3338-1 Linux kernel vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://www.debian.org/security/2017/dsa-3886 cve-icon cve-icon
http://www.securityfocus.com/bid/99130 cve-icon cve-icon
http://www.securitytracker.com/id/1038724 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1482 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1483 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1484 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1485 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1486 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1487 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1488 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1489 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1490 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1491 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1567 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1616 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1647 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2017:1712 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2017-1000364 cve-icon cve-icon
https://access.redhat.com/security/vulnerabilities/stackguard cve-icon
https://kc.mcafee.com/corporate/index?page=content&id=SB10205 cve-icon cve-icon
https://kc.mcafee.com/corporate/index?page=content&id=SB10207 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2017-1000364 cve-icon
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2017-1000364 cve-icon
https://www.exploit-db.com/exploits/45625/ cve-icon cve-icon
https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt cve-icon cve-icon cve-icon
https://www.suse.com/security/cve/CVE-2017-1000364/ cve-icon cve-icon
https://www.suse.com/support/kb/doc/?id=7020973 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-05T22:00:41.163Z

Reserved: 2017-06-19T00:00:00

Link: CVE-2017-1000364

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-06-19T16:29:00.233

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-1000364

cve-icon Redhat

Severity : Important

Publid Date: 2017-06-19T00:00:00Z

Links: CVE-2017-1000364 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses