Memory corruption in linux-vanilla (Alpine package)



Risk Medium
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2017-1000364
CWE-ID CWE-119
Exploitation vector Local
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
 tiff (Alpine package)
Operating systems & Components / Operating system package or component

linux-vanilla (Alpine package)
Operating systems & Components / Operating system package or component

Vendor Alpine Linux Development Team

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) Memory corruption

EUVDB-ID: #VU7131

Risk: Medium

CVSSv4.0: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Green]

CVE-ID: CVE-2017-1000364

CWE-ID: CWE-119 - Memory corruption

Exploit availability: Yes

Description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to memory management errors in implementation of various functions under multiple operating systems. A local or remote attacker can trigger the affected application to process specially crafted data, trigger memory corruption and execute arbitrary code on the target system. The vulnerability is dubbed by Qualys researchers as “Stack Clash”.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

tiff (Alpine package): 4.0.6-r2

linux-vanilla (Alpine package): 4.1.39-r0 - 4.9.33-r0

CPE2.3 External links

https://git.alpinelinux.org/aports/commit/?id=06c5219b94057c3690f3aa9da1efd01b0a55dd7c
https://git.alpinelinux.org/aports/commit/?id=4669d686eac61b19c31eeeec79194383cc4fd859
https://git.alpinelinux.org/aports/commit/?id=d4cf02c935dd2ad7e57409f7b80f99a3f4f89834
https://git.alpinelinux.org/aports/commit/?id=591fe22196a5fe915c771af9063e38abf639c127
https://git.alpinelinux.org/aports/commit/?id=a1971dc64ec6d1da57bd9d8c075c33ac454bed03
https://git.alpinelinux.org/aports/commit/?id=b20eb116b6c689c3902a3bbe790bd43d6f61c6ed


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, a fully functional exploit for this vulnerability is available.



###SIDEBAR###