CVE-2017-1000375

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
netbsdnetbsd
𝑥
≤ 7.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/99257
https://www.exploit-db.com/exploits/42272/
https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
http://www.securityfocus.com/bid/99257
https://www.exploit-db.com/exploits/42272/
https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt