PT-2017-2409 · Linux +3 · Linux Kernel +3

🗓️ 18 Jun 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 16 Views

Linux kernel 4.11.5 has a local flaw enabling AMD64 stack manipulation by mapping components to stack.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in Linux kernel	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities	25 Jul 201814:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM	17 Dec 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Kernel affect Power Hardware Management Console	22 Sep 202123:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the Linux kernel affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Open Source packages vulnerabilities	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager Appliance is affected by a kernel vulnerability (CVE-2017-5970)	22 Jun 201802:26	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/rsh_stack_clash_priv_esc.rb
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md
github	www.github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-8890
github	www.github.com/thinkycx/CVE-2017-8890
github	www.github.com/beraphin/CVE-2017-8890
github	www.github.com/RicterZ/PIE-Stack-Clash-CVE-2017-1000253
exploit-db	www.exploit-db.com/exploits/42275
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

17 Jan 2023 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.8 - 9.8

CVSS 210

CVSS 37.1 - 8.4

EPSS0.52841