Summary
It was discovered that libffi incorrectly enforced an executable stack. An
attacker could possibly use this issue, in combination with another
vulnerability, to facilitate executing arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libffi | 3.1~rc1+r3.0.13-12ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting t…
References
-
report
https://ubuntu.com/security/CVE-2017-1000376