CVE-2017-1000366 glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note....
HighCVSS 7.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glibc(Debian:12) | < 2.24-12 | 2.24-12 |
| debian/glibc(Debian:13) | < 2.24-12 | 2.24-12 |
| debian/glibc(Debian:14) | < 2.24-12 | 2.24-12 |
| redhat enterprise linux | = 5 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.6 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 5.9 | No fix listed |
| redhat enterprise linux server aus | = 6.2 | No fix listed |
| redhat enterprise linux server aus | = 6.4 | No fix listed |
| redhat enterprise linux server aus | = 6.5 | No fix listed |
| redhat enterprise linux server aus | = 6.6 | No fix listed |
| redhat enterprise linux server aus | = 7.2 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 6.2 | No fix listed |
| redhat enterprise linux server eus | = 6.5 | No fix listed |
| redhat enterprise linux server eus | = 6.7 | No fix listed |
| redhat enterprise linux server eus | = 7.2 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server long life | = 5.9 | No fix listed |
| redhat enterprise linux server tus | = 6.5 | No fix listed |
| redhat enterprise linux server tus | = 6.6 | No fix listed |
| redhat enterprise linux server tus | = 7.2 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| OpenStack cloud magnum orchestration | = 7 | No fix listed |
| novell suse linux enterprise desktop | = 12.0-sp2 | No fix listed |
| novell suse linux enterprise point of sale | = 11.0-sp3 | No fix listed |
| novell suse linux enterprise server | = 11.0-sp3 | No fix listed |
| openSUSE leap | = 42.2 | No fix listed |
| SUSE linux enterprise for sap | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 12-sp2 | No fix listed |
| SUSE linux enterprise server for raspberry pi | = 12-sp2 | No fix listed |
| SUSE linux enterprise software development kit | = 11.0-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 12.0-sp2 | No fix listed |
| GNU glibc | <= 2.25 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| mcafee web gateway | <= 7.6.2.14 | No fix listed |
| mcafee web gateway | >= 7.7.0.0, <= 7.7.2.2 | No fix listed |
References
- Debian Security Tracker CVE-2017-1000366 vendor-advisory
- packetstormsecurity.com
- 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X mailing-list
- DSA-3887 third-party-advisory vendor-advisory
- 99127 third-party-advisory vdb-entry
- 1038712 third-party-advisory vdb-entry
- RHSA-2017:1479 third-party-advisory vendor-advisory
- RHSA-2017:1480 third-party-advisory vendor-advisory
- RHSA-2017:1481 third-party-advisory vendor-advisory
- RHSA-2017:1567 third-party-advisory vendor-advisory
- RHSA-2017:1712 third-party-advisory vendor-advisory
- access.redhat.com third-party-advisory
- kc.mcafee.com patch third-party-advisory
- 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X mailing-list
- GLSA-201706-19 third-party-advisory vendor-advisory
- 42274 exploit third-party-advisory vdb-entry
- 42275 exploit third-party-advisory vdb-entry
- 42276 exploit third-party-advisory vdb-entry
- www.qualys.com technical-description third-party-advisory
- www.suse.com third-party-advisory
- www.suse.com third-party-advisory