What’s Vulnerable › Vulnerabilities
CVE-2017-1000366
- Severity: high (CVSS 7.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2017-06-19 · updated 2026-06-17
- Weakness: CWE-119
Description
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
Affected products
- Debian Linux: 8.0, 9.0
- GNU C Library (glibc): through 2.25
- McAfee Web Gateway (MWG): through 7.6.2.14; from 7.7.0.0 through 7.7.2.2
- Novell Suse Linux Enterprise Desktop: 12.0-sp2
- Novell Suse Linux Enterprise Point Of Sale: 11.0-sp3
- Novell Suse Linux Enterprise Server: 11.0-sp3
- OpenStack Cloud Magnum Orchestration: 7
- openSUSE Leap: 42.2
- Red Hat Enterprise Linux: 5, 6.0, 7.0
- RedHat Enterprise Linux Desktop: 6.0, 7.0
- RedHat Enterprise Linux Server: 6.0, 6.6, 7.0
- RedHat Enterprise Linux Server Aus: 5.9, 6.2, 6.4, 6.5, 6.6, 7.2 (+3)
- RedHat Enterprise Linux Server Eus: 6.2, 6.5, 6.7, 7.2, 7.3, 7.4 (+2)
- RedHat Enterprise Linux Server Long Life: 5.9
- RedHat Enterprise Linux Server Tus: 6.5, 6.6, 7.2, 7.3, 7.6
- RedHat Enterprise Linux Workstation: 6.0, 7.0
- SUSE Linux Enterprise For Sap: 12-sp1
- SUSE Linux Enterprise Server: 10-sp4, 11-sp4, 12-sp1, 12-sp2
- SUSE Linux Enterprise Server For Raspberry Pi: 12-sp2
- SUSE Linux Enterprise Software Development Kit: 11.0-sp4, 12.0-sp2
References
- http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
- http://seclists.org/fulldisclosure/2019/Sep/7
- http://www.debian.org/security/2017/dsa-3887
- http://www.securityfocus.com/bid/99127
- http://www.securitytracker.com/id/1038712
- https://access.redhat.com/errata/RHSA-2017:1479
- https://access.redhat.com/errata/RHSA-2017:1480
- https://access.redhat.com/errata/RHSA-2017:1481
- https://access.redhat.com/errata/RHSA-2017:1567
- https://access.redhat.com/errata/RHSA-2017:1712
- https://access.redhat.com/security/cve/CVE-2017-1000366
- https://kc.mcafee.com/corporate/index?page=content&id=SB10205
Get alerted when CVE-2017-1000366 or the next vulnerability affects your stack