high7.5Public exploit code
CVE-2017-1084
In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeBSD - 'FGPE' Stack Clash (PoC)2017-06-28 · dos · freebsd_x86 · Verified
- FreeBSD - 'FGPU' Stack Clash (PoC)2017-06-28 · dos · freebsd_x86 · Verified
Impact
In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Freebsd | before 11.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.exploit-db.com/exploits/42277/
- https://www.exploit-db.com/exploits/42278/
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
- https://www.exploit-db.com/exploits/42277/
- https://www.exploit-db.com/exploits/42278/
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt