CVE-2017-1000370 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	No
Type	Access restriction bypass
Description	The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2lib patch. This affects Linux Kernel version 4.11.5 and earlier. This is a different issue than CVE-2017-1000371. This issue appears to be limited to i386 based systems.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-320	linux-hardened	4.11.6.b-1		Medium	Not affected
AVG-312	linux-lts	4.9.38-1	4.9.39-1	Medium	Fixed

References
https://cybersecurity.upv.es/solutions/aslrv2/fix_offset2lib.patch https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

Notes
This issue appears to be limited to i386 based systems.