peter bassill · operator
$ cve CVE-2017-1000379 JSON

CVE-2017-1000379 EXPLOIT

7.8
HIGH · CVSS 3.1 · EPSS 1.8% (pctl 78)

Patch early

A public exploit exists.

Description

The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected.

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS1.83% — more likely to be exploited than 78% of all CVEs
On CISA KEVno
Public exploityes
Published2017-06-19
Last modified2026-06-17

Affected (1)

VendorProduct
linuxlinux kernel

Public exploits

SourceTitleDate
exploit-dbLinux Kernel (Debian 7.7/8.5/9.0 / Ubuntu 14.04.2/16.04.2/17.04 / Fedora 22/25 / CentOS 7.3.1611) - 'ldso_hwcap_64 Stack Clash' Local Privilege Escalation2017-06-28

References

→ the Explorer  ·  watch your stack  ·  NVD