BSA-2017-360
21399
27 October 2017
25 August 2017
Closed
Low
X.X
N/A
CVE-2017-1000365
Summary
Security Advisory ID : BSA-2017-360
Component : Linux Kernel
Revision : 2.0: Interim
The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIMIT_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker.
Affected ProductsBrocade is investigating its product lines to determine which products may be affected by this vulnerability and the impact on each affected product.
Products Confirmed Not VulnerableProducts
WorkaroundBrocade Fabric OS, Brocade FastIron OS, Brocade NetIron OS, Brocade ServerIron ADX, and Brocade Workflow Composer are confirmed not affected by this vulnerability..
Revision History
Version | Change | Date |
---|---|---|
1.0 | Initial Publication | August 25, 2017 |
2.0 | Updated to address ADX & WC | October 27, 2017 |