CVE-2017-1000366

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting…

published June 19, 2017

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02733 · 85.9th percentile
Published
2017-06-19T16:00Z
EPSS history
Timeline
  • 19 JUN 16:00Z
    glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting…
    cvelistv5