CVE-2017-1000374

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-19 · updated 2026-06-17

Description

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions.

Affected products

Netbsd: through 7.1

References

http://www.securityfocus.com/bid/99176
https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
http://www.securityfocus.com/bid/99176
https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

Get alerted when CVE-2017-1000374 or the next vulnerability affects your stack