ALT Linux Team

Package kernel-image-un-def update in p8 on 2017-06-22

ALT-PU-2017-1773-1

Package kernel-image-un-def updated to version 4.9.33-alt0.M80P.2 for branch p8 in task 184568.

Closed vulnerabilities

Published: 2017-06-18

BDU:2017-01479

Уязвимость в реализации механизма Stack Guard-Page ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: HIGH (7.4) Vector: AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2017-06-19
Modified: 2024-11-21

CVE-2017-1000364

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).

Severity: HIGH (7.4) Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top