Vulnerability identifier: #VU7135

Vulnerability risk: Medium

CVSSv3.1: 7.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2017-1000366

CWE-ID: CWE-119

Exploitation vector: Local

Exploits in database: 4

• June 17, 2021
  • GNU C Library Dynamic Loader glibc ld.so - Memory Leak / Buffer Overflow [Exploit-DB]
• March 18, 2020
  • Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - 'ldso_dynamic' Local Privilege Escalation 'Stack Clash' Exploit [Exploit-DB]
  • Linux Kernel (Debian 7.7/8.5/9.0 / Ubuntu 14.04.2/16.04.2/17.04 / Fedora 22/25 / CentOS 7.3.1611) - 'ldso_hwcap_64' Local Privilege Escalation 'Stack Clash' Exploit [Exploit-DB]
  • Linux Kernel (Debian 7/8/9/10 / Fedora 23/24/25 / CentOS 5.3/5.11/6.0/6.8/7.2.1511) - 'ldso_hwcap' Local Privilege Escalation 'Stack Clash' Exploit [Exploit-DB]

Impact: Code execution

Vulnerable software:
Glibc
Universal components / Libraries / Libraries used by multiple products

Vendor: GNU