CVE-2017-1000370

The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2lib patch. This affects Linux Kernel version 4.11.5 and earlier. This is a different issue than CVE-2017-1000371. This issue appears to be limited to i386 based systems.

• http://www.debian.org/security/2017/dsa-3981Third Party Advisory
• http://www.securityfocus.com/bid/99149Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/CVE-2017-1000370Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42273/Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42274/Third Party Advisory, VDB Entry
• https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtThird Party Advisory
• http://www.debian.org/security/2017/dsa-3981Third Party Advisory
• http://www.securityfocus.com/bid/99149Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/CVE-2017-1000370Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42273/Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42274/Third Party Advisory, VDB Entry
• https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtThird Party Advisory

Published

Jun 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000364An issue was discovered in the size of the stack guard page …
• CVE-2017-1000365The Linux Kernel imposes a size restriction on the arguments…7.8
• CVE-2017-1000366glibc contains a vulnerability that allows specially crafted…
• CVE-2017-1000367Todd Miller's sudo version 1.8.20 and earlier is vulnerable …
• CVE-2017-1000368Todd Miller's sudo version 1.8.20p1 and earlier is vulnerabl…
• CVE-2017-1000369Exim supports the use of multiple "-p" command line argument…4
• CVE-2017-1000371The offset2lib patch as used by the Linux Kernel contains a …7.8
• CVE-2017-1000372A flaw exists in OpenBSD's implementation of the stack guard…
• CVE-2017-1000373The OpenBSD qsort() function is recursive, and not randomize…
• CVE-2017-1000374A flaw exists in NetBSD's implementation of the stack guard …
• CVE-2017-1000375NetBSD maps the run-time link-editor ld.so directly below th…
• CVE-2017-1000376libffi requests an executable stack allowing attackers to mo…7