CVE-2017-1083

HIGH

FreeBSD < 11.2 - Stack-Based Buffer Overflow via Disabled Stack Guard-Page

Title source: llm

Description

In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be cause a stack overflow.

References (1)

Core 1

Core References

Exploit, Technical Description, Third Party Advisory x_refsource_misc

https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

Scores

CVSS v3 7.5

EPSS 0.0062

EPSS Percentile 70.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-119

Status published

Products (1)

freebsd/freebsd < 11.2

Published Sep 12, 2018

Tracked Since Feb 18, 2026