CVE-2017-1000379

Advisory lineage Upstream: 0 Downstream: 14
Modified
Published: 19 Jun 2017, 16:00
Last modified:05 Aug 2024, 22:00

Vulnerability Summary

Overall Risk (default)
medium
41/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.66% LOW
1% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

19 Jun 2017, 16:00
Published
Vulnerability first disclosed
05 Aug 2024, 22:00
Last Modified
Vulnerability information updated

Description

The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.66%• Percentile: 72%

Affected Systems

  • linux•linux_kernel

    ≥ 2.6.12, < 3.2.90 | ≥ 3.3, < 3.10.107 | ≥ 3.11, < 3.16.45 | ≥ 3.17, < 3.18.58 | ≥ 3.19, < 4.1.42 | ≥ 4.2, < 4.4.74 | ≥ 4.5, < 4.9.34 | ≥ 4.10, < 4.11.7

References (17)