CVE-2017-1000253

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi Dipakai ransomware EPSS 10,7%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada centos, redhat enterprise linux +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 9 September 2024, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the "gap" between the stack and the binary.

Rincian

Terbit di NVD

5 Oktober 2017

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

10,7% peluang dieksploitasi; lebih tinggi dari 95,7% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Linux Kernel PIE Stack Buffer Corruption Vulnerability

Masuk KEV

9 September 2024

Tenggat CISA

30 September 2024 (untuk instansi federal AS)

Ransomware

Tercatat dipakai dalam kampanye ransomware

Tindakan wajib

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.qualys.com/2017/09/26/cve-2017-1000253/cve-2017-1000253.txt patch · advisory pihak ketiga
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-1000253 pemerintah AS
• http://www.securityfocus.com/bid/101010 advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1039434 advisory pihak ketiga · vdb entry
• https://access.redhat.com/errata/RHSA-2017:2793 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:2794 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:2795 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:2796 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:2797 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:2798 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:2799 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:2800 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:2801 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:2802 advisory pihak ketiga