VULNERABILITY INTELLIGENCE

CVE-2017-1000374

CVSS score9.8 CRITICAL

EPSS probability3.43%

CISA KEVNot currently listed

Published2017-06-19

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions.

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory