Buffer overflow in GNU Glibc
CVE-2017-1000366
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
Vulnerability class: Buffer Overflow
EPSS: 0.027 (85.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Gnu Glibc
- Mcafee Web_gateway
- Novell Suse_linux_enterprise_desktop — versions 12.0
- Novell Suse_linux_enterprise_point_of_sale — versions 11.0
- Novell Suse_linux_enterprise_server — versions 11.0
- Openstack Cloud_magnum_orchestration — versions 7
- Debian Debian_linux — versions 8.0, 9.0
- Opensuse Leap — versions 42.2
- Redhat Enterprise_linux — versions 5, 6.0, 7.0
- Redhat Enterprise_linux_desktop — versions 6.0, 7.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
Frequently asked questions
- What is CVE-2017-1000366?
- CVE-2017-1000366 is a high-severity vulnerability in GNU Glibc, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2017-06-19.
- How severe is CVE-2017-1000366?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2017-1000366 known to be exploited?
- 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.