NetBSD Arbitrary Code Execution Vulnerability (CNVD-2017-15813)

NetBSD is a BSD-based operating system. An arbitrary code execution vulnerability exists in NetBSD. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected system...

NetBSD Arbitrary Code Execution Vulnerability

NetBSD is a BSD-based operating system. An arbitrary code execution vulnerability exists in NetBSD. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected system...

NetBSD Security Bypass Vulnerability

NetBSD is a BSD-based operating system. A security bypass vulnerability exists in NetBSD. An attacker could exploit this issue to bypass certain security restrictions and perform unauthorized operations...

blkif responses leak backend stack data

ISSUE DESCRIPTION The block interface response structure has some discontiguous fields. Certain backends populate the structure fields of an otherwise uninitialized instance of this structure on their stacks, leaking data through the internal or trailing padding field. IMPACT A malicious...

Visualizing the Stack Clash Vulnerability with Dashboards

Security teams should apply vendor patches immediately to protect their Linux, OpenBSD, NetBSD, FreeBSD and Solaris infrastructure from The Stack Clash vulnerability also see the security advisory. To help in that effort, this blog post describes a new built-in Qualys AssetView dashboard to...

Code injection

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions...

CVE-2017-1000375

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions...

CVE-2017-1000378

The NetBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000375

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions...

CVE-2017-1000378

The NetBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000374

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions...

CVE-2017-1000374

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions...

Design/Logic Flaw

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions...

Code injection

The NetBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000374

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions...

CVE-2017-1000378

The CVE-2017-1000378 entry concerns the NetBSD qsort() implementation. The root cause is that qsort() is recursive and not randomized, enabling an attacker to construct a pathological input array of N elements that deterministically recurses N/4 times. This can cause the process to consume arbitr...

CVE-2017-1000375

CVE-2017-1000375 pertains to NetBSD where the run-time linker ld.so is mapped directly below the stack region, bypassing ASLR and enabling memory manipulation that leads to arbitrary code execution. Affected family includes NetBSD 7.1 and possibly earlier versions. The vulnerability is demonstrat...

CVE-2017-1000375

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions...

CVE-2017-1000378

The NetBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000374

NetBSD stack guard page bypass vulnerability allows arbitrary code execution via certain setuid binaries. Affected: NetBSD 7.1 and possibly earlier. The description is consistent across CVE-2017-1000374 records; no exploit status or explicit remediation details are provided in the connected docum...