CVE-2017-1000366: debian debian_linux

Modified

AliasesSUSE-SU-2017:1611-1SUSE-SU-2017:1614-1SUSE-SU-2017:1619-1+9 more

Published 19-06-2017Last modified 05-08-2024

Vulnerability summary

CVE-2017-1000366 is a high (CVSS 7.8) vulnerability in debian debian_linux. EPSS estimates a 2.73% chance of exploitation in the next 30 days, higher than 86.1% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 28-06-2017)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.0 (NVD)

EPSS score

2.73%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits3exploit-database

Advisory lineage

Upstream 0 · Downstream 2 · Related 1

MGASA-2017-0184 OPENSUSE-SU-2024:10792-1

Timeline

19-06-2017
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.07.8v2.07.2

EPSS trend

Probability

2.73%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.73% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

3 found

exploit-databaselocallinux_x86Verified
Linux Kernel (Debian 7/8/9/10 / Fedora 23/24/25 / CentOS 5.3/5.11/6.0/6.8/7.2.1511) - 'ldso_hwcap Stack Clash' Local Privilege Escalation
Maturity: weaponized
exploit-databaselocallinux_x86Verified
Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - 'ldso_dynamic Stack Clash' Local Privilege Escalation
Maturity: weaponized
exploit-databaselocallinux_x86-64Verified
Linux Kernel (Debian 7.7/8.5/9.0 / Ubuntu 14.04.2/16.04.2/17.04 / Fedora 22/25 / CentOS 7.3.1611) - 'ldso_hwcap_64 Stack Clash' Local Privilege Escalation
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse20 products

glibc&distro=SUSE Linux Enterprise Desktop 12 SP2< 2.22-61.3
glibc&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 2.11.3-17.109.1
glibc&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 2.11.3-17.109.1
glibc&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 2.11.3-17.109.1
glibc&distro=SUSE Linux Enterprise Server 11 SP4< 2.11.3-17.109.1

Show all 20

Redhat17 products

enterprise_linuxEOL5 | 6.0 | 7.0
enterprise_linux_desktop6.0 | 7.0
enterprise_linux_server6.0 | 6.6 | 7.0
enterprise_linux_server_aus5.9 | 6.2 | 6.4 | 6.5 | 6.6 | 7.2 | 7.3 | 7.4 | 7.6
enterprise_linux_server_eus6.2 | 6.5 | 6.7 | 7.2 | 7.3 | 7.4 | 7.5 | 7.6

enterprise_linux_server_long_life5.9
enterprise_linux_server_tus6.5 | 6.6 | 7.2 | 7.3 | 7.6
enterprise_linux_workstation6.0 | 7.0
glibc< 0:2.5-107.el5_9.9 | < 0:2.5-123.el5_11.4 | < 0:2.12-1.166.el6_7.8 | < 0:2.12-1.47.el6_2.18 | < 0:2.12-1.107.el6_4.10 | < 0:2.12-1.132.el6_5.9 | < 0:2.12-1.149.el6_6.12 | < 0:2.17-106.el7_2.9 | < 0:2.12-1.209.el6_9.2 | < 0:2.17-157.el7_3.4
glibc-common< 0:2.5-107.el5_9.9 | < 0:2.5-123.el5_11.4 | < 0:2.12-1.166.el6_7.8 | < 0:2.12-1.47.el6_2.18 | < 0:2.12-1.107.el6_4.10 | < 0:2.12-1.132.el6_5.9 | < 0:2.12-1.149.el6_6.12 | < 0:2.17-106.el7_2.9 | < 0:2.12-1.209.el6_9.2 | < 0:2.17-157.el7_3.4
glibc-debuginfo< 0:2.5-107.el5_9.9 | < 0:2.5-123.el5_11.4 | < 0:2.12-1.166.el6_7.8 | < 0:2.12-1.47.el6_2.18 | < 0:2.12-1.107.el6_4.10 | < 0:2.12-1.132.el6_5.9 | < 0:2.12-1.149.el6_6.12 | < 0:2.17-106.el7_2.9 | < 0:2.12-1.209.el6_9.2 | < 0:2.17-157.el7_3.4
glibc-debuginfo-common< 0:2.5-107.el5_9.9 | < 0:2.5-123.el5_11.4 | < 0:2.12-1.166.el6_7.8 | < 0:2.12-1.47.el6_2.18 | < 0:2.12-1.107.el6_4.10 | < 0:2.12-1.132.el6_5.9 | < 0:2.12-1.149.el6_6.12 | < 0:2.17-106.el7_2.9 | < 0:2.12-1.209.el6_9.2 | < 0:2.17-157.el7_3.4
glibc-devel< 0:2.5-107.el5_9.9 | < 0:2.5-123.el5_11.4 | < 0:2.12-1.166.el6_7.8 | < 0:2.12-1.47.el6_2.18 | < 0:2.12-1.107.el6_4.10 | < 0:2.12-1.132.el6_5.9 | < 0:2.12-1.149.el6_6.12 | < 0:2.17-106.el7_2.9 | < 0:2.12-1.209.el6_9.2 | < 0:2.17-157.el7_3.4
glibc-headers< 0:2.5-107.el5_9.9 | < 0:2.5-123.el5_11.4 | < 0:2.12-1.166.el6_7.8 | < 0:2.12-1.47.el6_2.18 | < 0:2.12-1.107.el6_4.10 | < 0:2.12-1.132.el6_5.9 | < 0:2.12-1.149.el6_6.12 | < 0:2.17-106.el7_2.9 | < 0:2.12-1.209.el6_9.2 | < 0:2.17-157.el7_3.4
glibc-static< 0:2.12-1.166.el6_7.8 | < 0:2.12-1.47.el6_2.18 | < 0:2.12-1.107.el6_4.10 | < 0:2.12-1.132.el6_5.9 | < 0:2.12-1.149.el6_6.12 | < 0:2.17-106.el7_2.9 | < 0:2.12-1.209.el6_9.2 | < 0:2.17-157.el7_3.4
glibc-utils< 0:2.5-107.el5_9.9 | < 0:2.5-123.el5_11.4 | < 0:2.12-1.166.el6_7.8 | < 0:2.12-1.47.el6_2.18 | < 0:2.12-1.107.el6_4.10 | < 0:2.12-1.132.el6_5.9 | < 0:2.12-1.149.el6_6.12 | < 0:2.17-106.el7_2.9 | < 0:2.12-1.209.el6_9.2 | < 0:2.17-157.el7_3.4
nscd< 0:2.5-107.el5_9.9 | < 0:2.5-123.el5_11.4 | < 0:2.12-1.166.el6_7.8 | < 0:2.12-1.47.el6_2.18 | < 0:2.12-1.107.el6_4.10 | < 0:2.12-1.132.el6_5.9 | < 0:2.12-1.149.el6_6.12 | < 0:2.17-106.el7_2.9 | < 0:2.12-1.209.el6_9.2 | < 0:2.17-157.el7_3.4

Show all 17

Debian3 products

eglibc< 2.13-38+deb7u12
glibc< 2.24-12 | < 2.19-18+deb8u10 | < 2.24-11+deb9u1
debian_linuxEOL8.0 | 9.0

Novell3 products

suse_linux_enterprise_desktop12.0:sp2
suse_linux_enterprise_point_of_sale11.0:sp3
suse_linux_enterprise_server11.0:sp3

Ubuntu2 products

eglibc< 2.19-0ubuntu6.13
glibc< 2.23-0ubuntu9

Gnu1 product

glibc≤ 2.25

Mcafee1 product

web_gateway≤ 7.6.2.14 | ≥ 7.7.0.0, ≤ 7.7.2.2

Openstack1 product

cloud_magnum_orchestration7

Opensuse1 product

leapEOL42.2

9 vendors · 49 products

References

42 links

www.qualys.com/2017/06/19/stack-clash/stack-clash.txtX Refsource MISCTechnical DescriptionThird Party AdvisoryARTICLE
www.securitytracker.com/id/1038712VDB EntryX Refsource SECTRACKThird Party Advisory
www.exploit-db.com/exploits/42275/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2017:1712Vendor AdvisoryX Refsource REDHATThird Party Advisory
www.suse.com/security/cve/CVE-2017-1000366/X Refsource CONFIRMThird Party Advisory
access.redhat.com/errata/RHSA-2017:1479Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:1480Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.securityfocus.com/bid/99127VDB EntryX Refsource BIDThird Party Advisory
www.exploit-db.com/exploits/42276/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.suse.com/support/kb/doc/?id=7020973X Refsource CONFIRMThird Party Advisory

Show all 42 references

access.redhat.com/errata/RHSA-2017:1567Vendor AdvisoryX Refsource REDHATThird Party Advisory
www.exploit-db.com/exploits/42274/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
access.redhat.com/security/cve/CVE-2017-1000366X Refsource CONFIRMThird Party AdvisoryREPORT
access.redhat.com/errata/RHSA-2017:1481Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.debian.org/security/2017/dsa-3887Vendor AdvisoryX Refsource DEBIANThird Party Advisory
security.gentoo.org/glsa/201706-19Vendor AdvisoryX Refsource GENTOOThird Party Advisory
kc.mcafee.com/corporate/index?page=content&id=SB10205X Refsource CONFIRMPatchThird Party Advisory
seclists.org/fulldisclosure/2019/Sep/7Mailing ListX Refsource FULLDISC
seclists.org/bugtraq/2019/Sep/7Mailing ListX Refsource BUGTRAQ
packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.htmlX Refsource MISC
www.suse.com/support/update/announcement/2017/suse-su-20171611-1/Advisory
bugzilla.suse.com/1038690REPORT
bugzilla.suse.com/1039357REPORT
bugzilla.suse.com/987216REPORT
www.suse.com/security/cve/CVE-2017-1000366WEB
www.suse.com/support/update/announcement/2017/suse-su-20171614-1/Advisory
bugzilla.suse.com/986858REPORT
www.suse.com/support/update/announcement/2017/suse-su-20171619-1/Advisory
bugzilla.suse.com/1040043REPORT
www.suse.com/support/update/announcement/2017/suse-su-20171621-1/Advisory
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/security/vulnerabilities/stackguardARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1452543REPORT
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1479.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2017-1000366AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2017-1000366Advisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1480.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1481.jsonAdvisory
ubuntu.com/security/CVE-2017-1000366REPORT
ubuntu.com/security/notices/USN-3323-1Advisory
ubuntu.com/security/notices/USN-3323-2Advisory
security-tracker.debian.org/tracker/CVE-2017-1000366Advisory