Summary
It was discovered that the stack guard page for processes in the Linux
kernel was not sufficiently large enough to prevent overlapping with the
heap. An attacker could leverage this with another vulnerability to execute
arbitrary code and gain administrative privileges
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1020.29 |
Vulnerabilities 1
-
Unscored —CVE-2017-1000364 Public exploit
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not suffici…
References
-
report
https://ubuntu.com/security/CVE-2017-1000364