7.8

CVE-2017-1000370: linux linux_kernel

Modified
AliasesUBUNTU-CVE-2017-1000370DEBIAN-CVE-2017-1000370
Published 19-06-2017Last modified 05-08-2024

Vulnerability summary

CVE-2017-1000370 is a high (CVSS 7.8) vulnerability in linux linux_kernel. EPSS estimates a 2.25% chance of exploitation in the next 30 days, higher than 82.9% of scored vulnerabilities. 2 public exploits are recorded.

Priority
Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 28-06-2017)

Source freshness unavailable

How is this decided?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
2.25%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits2exploit-database

Advisory lineage

Upstream 0 · Downstream 1
DSA-3981-1

Timeline

  1. 19-06-2017
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2lib patch. This affects Linux Kernel version 4.11.5 and earlier. This is a different issue than CVE-2017-1000371. This issue appears to be limited to i386 based systems.

CVSS metrics

5 scores · 3 sources · 3 versions

EPSS trend

Probability

2.25%

Chance of exploitation in the next 30 days

Percentile

83%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.25% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found
  • exploit-databaselocallinux_x86Verified

    Linux Kernel (Debian 7/8/9/10 / Fedora 23/24/25 / CentOS 5.3/5.11/6.0/6.8/7.2.1511) - 'ldso_hwcap Stack Clash' Local Privilege Escalation

    Maturity: weaponized

  • exploit-databaselocallinux_x86Verified

    Linux Kernel - 'offset2lib' Stack Clash

    Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu16 products
  • linux< 4.4.0-93.116
  • linux-aws< 4.4.0-1032.41
  • linux-azureAll versions (No fix recorded)
  • linux-azure-fdeAll versions (No fix recorded)
  • linux-gcp< 4.13.0-1002.5 | All versions (No fix recorded)
Debian1 product
  • linux< 4.11.11-1
Linux1 product
  • linux_kernel≥ 4.1, < 4.1.43 | ≥ 4.2, < 4.4.78 | ≥ 4.5, < 4.9.39 | ≥ 4.10, < 4.11.12 | ≥ 4.12, < 4.12.3

3 vendors · 18 products

References

10 links