CVE-2017-1000376: libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack

Description

libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

High

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 43% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

DL

Debian Linux · Debian

8.0; 9.0 · source: NVD

EL

Enterprise Linux · Redhat

6.0; 7.0 · source: NVD

EV

Enterprise Virtualization Server · Redhat

All versions, or not specified · source: NVD

LI

Libffi · Libffi Project

before 3.2 · source: NVD

OP

Openshift · Redhat

2.0 · source: NVD

PE

Peopletools · Oracle

8.56; 8.57 · source: NVD