CVE-2017-1000374

Published: Jun 19, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions.

Affected (1)

Products: Netbsd: Netbsd

Netbsd

1 product

Netbsd

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netbsd Netbsd	Up to 7.1

References (4)

http://www.securityfocus.com/bid/99176

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/99176

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.