CVE-2017-1000364

Impact:
Important
Public Date:
2017-06-19
Bugzilla:
1461333: CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations
A flaw was found in the way memory was being allocated on the stack for user space binaries. If heap (or different memory region) and stack memory regions were adjacent to each other, an attacker could use this flaw to jump over the stack guard gap, cause controlled memory corruption on process stack or the adjacent memory region, and thus increase their privileges on the system. This is a kernel-side mitigation which increases the stack guard gap size from one page to 1 MiB to make successful exploitation of this issue more difficult.

Find out more about CVE-2017-1000364 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

Base Score 6.2
Base Metrics AV:L/AC:H/Au:N/C:C/I:C/A:C
Access Vector Local
Access Complexity High
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete

CVSS v3 metrics

CVSS3 Base Score 7.4
CVSS3 Base Metrics CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity Impact High
Availability Impact High

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux for Real Time for NFV (v. 7) (kernel-rt) RHSA-2017:1616 2017-06-28
Red Hat Enterprise Linux Server (v. 5 ELS) (kernel) RHSA-2017:1482 2017-06-19
Red Hat Enterprise Linux Advanced Update Support 6.2 (kernel) RHSA-2017:1491 2017-06-19
Red Hat Enterprise Linux Long Life (v. 5.9 server) (kernel) RHSA-2017:1483 2017-06-19
Red Hat Enterprise Linux Server TUS (v. 6.6) (kernel) RHSA-2017:1488 2017-06-19
Red Hat Container Development Kit 3.0 RHSA-2017:1567 2017-06-21
Red Hat Enterprise Linux Advanced Update Support 6.5 (kernel) RHSA-2017:1489 2017-06-19
Red Hat Enterprise Linux 6 (kernel) RHSA-2017:1486 2017-06-19
MRG Grid for RHEL 6 Server v.2 (kernel-rt) RHSA-2017:1647 2017-06-28
Red Hat Enterprise Linux 7 (kernel) RHSA-2017:1484 2017-06-20
Red Hat Enterprise Linux Extended Update Support 7.2 (kernel) RHSA-2017:1485 2017-06-19
Red Hat Enterprise Linux Server TUS (v. 6.5) (kernel) RHSA-2017:1489 2017-06-19
Red Hat Enterprise Linux Extended Update Support 6.7 (kernel) RHSA-2017:1487 2017-06-19
Red Hat Enterprise Linux Advanced Update Support 6.6 (kernel) RHSA-2017:1488 2017-06-19
Red Hat Enterprise Linux Advanced Update Support 6.4 (kernel) RHSA-2017:1490 2017-06-19

Affected Packages State

Platform Package State
RHEV-M for Servers rhev-hypervisor Affected
RHEV-M for Servers rhevm-appliance Affected
RHEV-M 4.0 rhev-hypervisor-ng Affected
RHEV-M 4.0 rhevm-appliance Affected

Acknowledgements

Red Hat would like to thank Qualys Research Labs for reporting this issue.

Mitigation

External References

Last Modified