Cloudanix VulnDB

CVE-2017-1000253

High · 7.8 CISA KEV · ransomware

CVSS

7.8

EPSS

10.7%

Published

Oct 5, 2017

CISA due date

Sep 30, 2024

The record

Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the "gap" between the stack and the binary.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 linux 0 4.0.2-1
Debian:12 linux 0 4.0.2-1
Debian:13 linux 0 4.0.2-1
Red Hat:enterprise_linux:6::client kernel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-abi-whitelists 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-bootwrapper 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-debug 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-debug-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-debug-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-i686 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-ppc64 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-s390x 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-x86_64 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-doc 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-firmware 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-headers 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-kdump 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-kdump-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client kernel-kdump-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client perf 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client perf-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client python-perf 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::client python-perf-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-abi-whitelists 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-bootwrapper 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debug 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debug-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debug-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-i686 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-ppc64 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-s390x 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-x86_64 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-doc 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-firmware 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-headers 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-kdump 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-kdump-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode kernel-kdump-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode perf 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode perf-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode python-perf 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::computenode python-perf-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-abi-whitelists 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-bootwrapper 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-debug 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-debug-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-debug-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-i686 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-ppc64 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-s390x 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-x86_64 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-doc 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-firmware 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-headers 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-kdump 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-kdump-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server kernel-kdump-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server perf 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server perf-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server python-perf 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::server python-perf-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-abi-whitelists 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-bootwrapper 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debug 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debug-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debug-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-i686 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-ppc64 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-s390x 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-x86_64 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-doc 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-firmware 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-headers 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-kdump 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-kdump-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation kernel-kdump-devel 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation perf 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation perf-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation python-perf 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:6::workstation python-perf-debuginfo 0 0:2.6.32-696.10.3.el6
Red Hat:enterprise_linux:7::client kernel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-abi-whitelists 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-bootwrapper 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-debug 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-debug-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-debug-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-ppc64 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-ppc64le 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-s390x 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-x86_64 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-doc 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-headers 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-kdump 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-kdump-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-kdump-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-tools 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-tools-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-tools-libs 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client kernel-tools-libs-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client perf 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client perf-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client python-perf 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::client python-perf-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-abi-whitelists 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-bootwrapper 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-debug 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-debug-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-debug-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-ppc64 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-ppc64le 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-s390x 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-x86_64 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-doc 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-headers 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-kdump 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-kdump-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-kdump-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-tools 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-tools-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-tools-libs 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode kernel-tools-libs-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode perf 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode perf-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode python-perf 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::computenode python-perf-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-abi-whitelists 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-bootwrapper 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-debug 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-debug-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-debug-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-ppc64 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-ppc64le 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-s390x 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-x86_64 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-doc 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-headers 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-kdump 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-kdump-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-kdump-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-tools 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-tools-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-tools-libs 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server kernel-tools-libs-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server perf 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server perf-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server python-perf 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::server python-perf-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-abi-whitelists 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-bootwrapper 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-debug 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-debug-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-debug-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-debuginfo-common-ppc64 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-debuginfo-common-ppc64le 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-debuginfo-common-s390x 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-debuginfo-common-x86_64 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-doc 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-headers 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-kdump 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-kdump-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-kdump-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-tools 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-tools-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-tools-libs 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation kernel-tools-libs-devel 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation perf 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation perf-debuginfo 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation python-perf 0 0:3.10.0-693.el7
Red Hat:enterprise_linux:7::workstation python-perf-debuginfo 0 0:3.10.0-693.el7
Red Hat:rhel_aus:5.9 kernel 0 0:2.6.18-348.34.2.el5
Red Hat:rhel_aus:5.9 kernel-PAE 0 0:2.6.18-348.34.2.el5
Red Hat:rhel_aus:5.9 kernel-PAE-debuginfo 0 0:2.6.18-348.34.2.el5
Red Hat:rhel_aus:5.9 kernel-PAE-devel 0 0:2.6.18-348.34.2.el5
Red Hat:rhel_aus:5.9 kernel-debug 0 0:2.6.18-348.34.2.el5
Red Hat:rhel_aus:5.9 kernel-debug-debuginfo 0 0:2.6.18-348.34.2.el5
Red Hat:rhel_aus:5.9 kernel-debug-devel 0 0:2.6.18-348.34.2.el5
Red Hat:rhel_aus:5.9 kernel-debuginfo 0 0:2.6.18-348.34.2.el5
Red Hat:rhel_aus:5.9 kernel-debuginfo-common 0 0:2.6.18-348.34.2.el5

Related vulnerabilities