CVE-2017-1000373
28Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 13%
de la publicación al arma9 días
Publicada en NVD19 jun
1ª PoC+9d
probabilidad de explotación
13%top 4% de las CVE
explotación observada
noninguna fuente lo reporta
2 exploit(s) público(s)
The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in arbitrary code execution attacks. This affects OpenBSD 6.1 and possibly earlier versions.
Productos afectados
n/a · n/aPoCs públicas encontradas — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/42271cve_referencewww.exploit-db.com/exploits/42271/no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/qsort.c?rev=1.15&content-type=text/x-cvsweb-markuphttps://support.apple.com/HT208112https://support.apple.com/HT208113https://support.apple.com/HT208115https://support.apple.com/HT208144https://www.exploit-db.com/exploits/42271/https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txthttp://www.securityfocus.com/bid/99177http://www.securitytracker.com/id/1039427