CVE-2017-1000376 - log back

CVE-2017-1000376 created at 25 Sep 2019 19:31:40
Severity
+ High
Remote
+ Remote
Type
+ Arbitrary code execution
Description
+ libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. This affects libffi version 3.2.1.
References
+ https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
Notes