Memory corruption in GNU C Library (glibc) - CVE-2017-1000366

Vulnerability identifier: #VU7135

CSH Severity: Medium

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-1000366

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to memory management errors in implementation of various functions under multiple operating systems. A local or remote attacker can trigger the affected application to process specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

GNU C Library (glibc)
Debian Linux
Gentoo Linux
Arch Linux
Amazon Linux AMI
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power
SUSE Linux
Ubuntu
Slackware Linux
Fedora
musl (Alpine package)
glibc
Red Hat Virtualization Host
Dynamic System Analysis (DSA) Preboot

Install update from vendor's website.

musl (Alpine package) - update to 1.1.14-r15
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
glibc - addressed in versions 2.23.1-12.fc24, 2.24-8.fc25, 2.25-6.fc26

• Exploit #6384 - GNU C Library Dynamic Loader glibc ld.so - Memory Leak / Buffer Overflow (June 17, 2021)
• Exploit #1244 - Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - 'ldso_dynamic' Local Privilege Escalation 'Stack Clash' Exploit (March 18, 2020)
• Exploit #1245 - Linux Kernel (Debian 7.7/8.5/9.0 / Ubuntu 14.04.2/16.04.2/17.04 / Fedora 22/25 / CentOS 7.3.1611) - 'ldso_hwcap_64' Local Privilege Escalation 'Stack Clash' Exploit (March 18, 2020)
• Exploit #1246 - Linux Kernel (Debian 7/8/9/10 / Fedora 23/24/25 / CentOS 5.3/5.11/6.0/6.8/7.2.1511) - 'ldso_hwcap' Local Privilege Escalation 'Stack Clash' Exploit (March 18, 2020)

• http://sourceware.org/git/?p=glibc.git;a=commit;h=f6110a8fee2ca36f8e2d2abecf3cba9fa7b8ea7d
• https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

• Arbitrary code execution in GNU Glibc
• Debian update for glibc
• Ubuntu update for GNU C Library
• Slackware Linux update for glibc
• Arch Linux update for lib32-glibc
• Arch Linux update for glibc
• Ubuntu update for GNU C Library
• Amazon Linux AMI update for glibc
• OpenSUSE Linux update for glibc
• SUSE Linux update for glibc
• SUSE Linux update for glibc
• SUSE Linux update for glibc
• SUSE Linux update for glibc
• Red Hat update for glibc
• Red Hat update for glibc
• Red Hat update for glibc
• Memory corruption in musl (Alpine package)
• Gentoo update for GNU C Library
• Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot
• Fedora 26 update for glibc
• Fedora 24 update for glibc
• Fedora 25 update for glibc