CVE-2017-1000364

EPSS 5.2%

Vexday Risk Score

38Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 5.2%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado

Lifecycle

19 Jun 2017Metasploit module available

19 Jun 2017Published on NVD

16 Oct 2018Public PoC

Weaponization speed

483 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/45625/unverified exploitdbwww.exploit-db.com/exploits/45625unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References