CVE-2017-1000371

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

• http://www.debian.org/security/2017/dsa-3981Third Party Advisory
• http://www.securityfocus.com/bid/99131Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/CVE-2017-1000371Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42273/Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42276/Third Party Advisory, VDB Entry
• https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtThird Party Advisory
• http://www.debian.org/security/2017/dsa-3981Third Party Advisory
• http://www.securityfocus.com/bid/99131Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/CVE-2017-1000371Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42273/Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42276/Third Party Advisory, VDB Entry
• https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txtThird Party Advisory

Published

Jun 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000365The Linux Kernel imposes a size restriction on the arguments…7.8
• CVE-2017-1000366glibc contains a vulnerability that allows specially crafted…
• CVE-2017-1000367Todd Miller's sudo version 1.8.20 and earlier is vulnerable …
• CVE-2017-1000368Todd Miller's sudo version 1.8.20p1 and earlier is vulnerabl…
• CVE-2017-1000369Exim supports the use of multiple "-p" command line argument…4
• CVE-2017-1000370The offset2lib patch as used in the Linux Kernel contains a …7.8
• CVE-2017-1000372A flaw exists in OpenBSD's implementation of the stack guard…
• CVE-2017-1000373The OpenBSD qsort() function is recursive, and not randomize…
• CVE-2017-1000374A flaw exists in NetBSD's implementation of the stack guard …
• CVE-2017-1000375NetBSD maps the run-time link-editor ld.so directly below th…
• CVE-2017-1000376libffi requests an executable stack allowing attackers to mo…7
• CVE-2017-1000377An issue was discovered in the size of the default stack gua…