CVE-2017-1000370

EUVD-2017-1529

19.06.2017, 16:29

The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2lib patch. This affects Linux Kernel version 4.11.5 and earlier. This is a different issue than CVE-2017-1000371. This issue appears to be limited to i386 based systems.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 82%

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	4.1 ≤ 𝑥 < 4.1.43
linux	linux_kernel	4.2 ≤ 𝑥 < 4.4.78
linux	linux_kernel	4.5 ≤ 𝑥 < 4.9.39
linux	linux_kernel	4.10 ≤ 𝑥 < 4.11.12
linux	linux_kernel	4.12 ≤ 𝑥 < 4.12.3

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
sid	6.11.6-1 fixed
trixie	6.11.5-1 fixed
wheezy	not-affected

Ubuntu Releases

Ubuntu Product

Codename

linux

artful	not-affected
bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
trusty	not-affected
xenial	Fixed 4.4.0-93.116 released
yakkety	ignored
zesty	ignored

linux-aws

artful	dne
bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
trusty	not-affected
xenial	Fixed 4.4.0-1032.41 released
yakkety	dne
zesty	dne

linux-aws-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-5.4

bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-fips

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	ignored

linux-aws-hwe

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	not-affected

linux-azure

artful	dne
bionic	ignored
focal	not-affected
jammy	not-affected
noble	not-affected
trusty	not-affected
xenial	not-affected
yakkety	dne
zesty	dne

linux-azure-4.15

bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.4

bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fde

bionic	dne
focal	ignored
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-azure-fde-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fips

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	ignored

linux-bluefield

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-euclid

artful	dne
bionic	dne
trusty	dne
xenial	ignored
zesty	dne

linux-fips

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-flo

artful	dne
bionic	dne
trusty	dne
xenial	ignored
yakkety	ignored
zesty	dne

linux-gcp

artful	dne
bionic	ignored
focal	not-affected
jammy	not-affected
noble	not-affected
trusty	dne
xenial	Fixed 4.13.0-1002.5 released
yakkety	dne
zesty	dne

linux-gcp-4.15

bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.4

bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-fips

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	ignored

linux-gke

artful	dne
bionic	dne
focal	ignored
jammy	not-affected
noble	not-affected
trusty	dne
xenial	Fixed 4.4.0-1028.28 released
yakkety	dne
zesty	dne

linux-gkeop

bionic	dne
focal	not-affected
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-gkeop-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-goldfish

artful	dne
bionic	dne
trusty	dne
xenial	not-affected
yakkety	not-affected
zesty	not-affected

linux-grouper

artful	dne
bionic	dne
trusty	dne
xenial	dne
yakkety	dne
zesty	dne

linux-hwe

artful	dne
bionic	ignored
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	Fixed 4.13.0-32.35~16.04.1 released
yakkety	dne
zesty	dne

linux-hwe-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-5.4

bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-hwe-edge

artful	dne
bionic	ignored
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	Fixed 4.13.0-26.29~16.04.2 released
yakkety	dne
zesty	dne

linux-ibm

bionic	dne
focal	not-affected
jammy	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-ibm-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-ibm-5.4

bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-intel

bionic	dne
focal	dne
jammy	dne
noble	not-affected
trusty	dne
xenial	dne

linux-intel-iot-realtime

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-intel-iotg

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-intel-iotg-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-iot

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-kvm

artful	dne
bionic	not-affected
focal	not-affected
jammy	not-affected
noble	dne
trusty	dne
xenial	Fixed 4.4.0-1007.12 released
zesty	dne

linux-lowlatency

bionic	dne
focal	dne
jammy	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-lowlatency-hwe-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-lowlatency-hwe-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-lts-quantal

artful	dne
bionic	dne
trusty	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-raring

artful	dne
bionic	dne
trusty	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-saucy

artful	dne
bionic	dne
trusty	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-trusty

artful	dne
bionic	dne
trusty	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-utopic

artful	dne
bionic	dne
trusty	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-vivid

artful	dne
bionic	dne
trusty	ignored
xenial	dne
yakkety	dne
zesty	dne

linux-lts-wily

artful	dne
bionic	dne
trusty	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-xenial

artful	dne
bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	Fixed 4.4.0-93.116~14.04.1 released
xenial	dne
yakkety	dne
zesty	dne

linux-maguro

artful	dne
bionic	dne
trusty	dne
xenial	dne
yakkety	dne
zesty	dne

linux-mako

artful	dne
bionic	dne
trusty	dne
xenial	ignored
yakkety	ignored
zesty	dne

linux-manta

artful	dne
bionic	dne
trusty	dne
xenial	dne
yakkety	dne
zesty	dne

linux-nvidia

bionic	dne
focal	dne
jammy	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-nvidia-6.5

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-nvidia-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-nvidia-lowlatency

bionic	dne
focal	dne
jammy	dne
noble	not-affected
trusty	dne
xenial	dne

linux-oem

artful	dne
bionic	ignored
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	not-affected
zesty	dne

linux-oem-6.8

bionic	dne
focal	dne
jammy	dne
noble	not-affected
trusty	dne
xenial	dne

linux-oracle

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
trusty	dne
xenial	not-affected

linux-oracle-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-oracle-5.4

bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi

bionic	dne
focal	not-affected
jammy	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-raspi-5.4

bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi-realtime

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi2

artful	not-affected
bionic	not-affected
focal	ignored
jammy	dne
noble	dne
trusty	dne
xenial	Fixed 4.4.0-1071.79 released
yakkety	ignored
zesty	ignored

linux-realtime

bionic	dne
focal	dne
jammy	ignored
noble	dne
trusty	dne
xenial	dne

linux-riscv

bionic	dne
focal	ignored
jammy	ignored
noble	not-affected
trusty	dne
xenial	dne

linux-riscv-5.15

bionic	dne
focal	not-affected
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-riscv-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-snapdragon

artful	not-affected
bionic	not-affected
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	Fixed 4.4.0-1073.78 released
yakkety	ignored
zesty	Fixed 4.4.0-1073.78 released

linux-xilinx-zynqmp

bionic	dne
focal	not-affected
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

References

http://www.debian.org/security/2017/dsa-3981

http://www.securityfocus.com/bid/99149

https://access.redhat.com/security/cve/CVE-2017-1000370

https://www.exploit-db.com/exploits/42273/