CVE-2017-1085

In FreeBSD before 11.2-RELEASE, an application which calls setrlimit to increase RLIMITSTACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploited to execute arbitrary code in the user context...

CVE-2017-1085

CVE-2017-1085 affects FreeBSD prior to 11.2-RELEASE: when an application calls setrlimit() to raise RLIMIT_STACK, a read-only memory region below the stack can be turned into read-write, enabling a specially crafted executable to execute arbitrary code in the user context. A PoC exists (Exploit-D...

FreeBSD - 'setrlimit' Stack Clash (PoC)

/ FreeBSDCVE-2017-1085.c Copyright C 2017 Qualys, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or at your option any later version. This...

CVE-2017-1085

creationtimestamp| type| source ---|---|--- 2017-06-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42279...