PT-2017-2282 · Linux +3 · Linux Kernel +3

🗓️ 18 Jun 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 7 Views

Linux kernel Stack Guard-Page flaw enables local denial of service via RLIMIT STACK and RLIM INFINITY; affected versions 2.6.23–4.11.5.

Reporter	Title	Published	Views	Family All 6751
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the Linux kernel affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager appliances are affected by kernel vulnerabilities	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager version 9.0.3.0 appliances are affected by multiple kernel vulnerabilities	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Open Source packages vulnerabilities	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities	27 Jun 201908:40	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/rsh_stack_clash_priv_esc.rb
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md
github	www.github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-7533
github	www.github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-8890
github	www.github.com/thinkycx/CVE-2017-8890
github	www.github.com/beraphin/CVE-2017-8890
github	www.github.com/lexfo/cve-2017-11176
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
security-tracker	www.security-tracker.debian.org/tracker/DSA-3945-1
osv	www.osv.dev/vulnerability/USN-3378-2

17 Jan 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8 - 9.8

CVSS 37.1 - 8.8

CVSS 210

EPSS0.52841