Published: 19/06/2017 Updated: 17/01/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 643

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows malicious users to bypass this limitation. This affects Linux Kernel versions 4.11.5 and previous versions. It appears that this feature was introduced in the Linux Kernel version 2.6.23.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2014-9940 A use-after-free flaw in the voltage and current regulator driver could allow a local user to cause a denial of service or potentially escalate privileges CVE-2017-7346 Li ...

The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIMIT_INFINITY, but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation ...

Several security issues were fixed in the Linux kernel ...

USN-3378-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the Linux kernel ...

USN-3378-2 introduced a regression the Linux Hardware Enablement kernel ...

Several security issues were fixed in the Linux kernel ...

The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation This affects Linux Kernel versions 4115 and earlier It appears that this featur ...

NVD-CWE-noinfo https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt https://access.redhat.com/security/cve/CVE-2017-1000365 http://www.securityfocus.com/bid/99156 http://www.debian.org/security/2017/dsa-3945 http://www.debian.org/security/2017/dsa-3927 https://nvd.nist.gov https://www.debian.org/security/./dsa-3945 https://usn.ubuntu.com/3381-1/

CVE-2017-1000365

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect