Security restrictions bypass in Linux kernel - CVE-2017-1000371

Vulnerability identifier: #VU8002

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-1000371

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local attacker to bypass security restrictions on the target system.

The weakness exists due to a flaw in offset2lib patch. A local attacker can send a specially-crafted request, bypass security restrictions and gain full access to the system.

Linux kernel
Amazon Linux AMI
CentOS
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Fedora
kernel (Red Hat package)
kernel
Juniper Junos Space

Update to version 4.11.6.

kernel (Red Hat package) - update to 2.6.32-754.29.1.el6
kernel - addressed in versions 4.11.6-100.fc24, 4.11.6-101.fc24, 4.11.6-200.fc25, 4.11.6-201.fc25, 4.11.6-300.fc26, 4.11.6-301.fc26
Juniper Junos Space - update to 20.3R1

• Exploit #1295 - Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - 'ldso_dynamic' Local Privilege Escalation 'Stack Clash' Exploit (March 18, 2020)
• Exploit #1296 - Linux Kernel - 'offset2lib' 'Stack Clash' Exploit (March 18, 2020)

• https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

• Security restrictions bypass in Linux Kernel
• Red Hat Enterprise Linux 6 update for kernel
• CentOS 6 update for kernel
• Amazon Linux AMI update for kernel
• Multiple vulnerabilities in Juniper Junos Space
• Fedora 26 update for kernel
• Fedora 25 update for kernel
• Fedora 24 update for kernel
• Fedora 26 update for kernel
• Fedora 25 update for kernel
• Fedora 24 update for kernel