Sploitus

CVE-2017-1000366

14 known exploits for CVE-2017-1000366

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.

Affected products
Alt Linux, Centos, Red Hat, Suse, Ubuntu, Glibc
Redhat Enterprise Linux
= 5, 6.0, 7.0
Redhat Enterprise Linux Desktop
= 6.0, 7.0
Redhat Enterprise Linux Server
= 6.0, 6.6, 7.0
Redhat Enterprise Linux Server Aus
= 5.9, 6.2, 6.4, 6.5, 6.6, 7.2, 7.3, 7.4, 7.6
Redhat Enterprise Linux Server Eus
= 6.2, 6.5, 6.7, 7.2, 7.3, 7.4, 7.5, 7.6
Redhat Enterprise Linux Server Long Life
= 5.9
CVSS 3.0
7.8 HIGH
EPSS
2.6% (84th percentile)
Weakness
CWE-119
NVD status
Modified
Published
2017-06-19
CVE-2017-1000366 at NVD
Authoritative description, scoring and affected products

14 known exploits for CVE-2017-1000366

Proof-of-concept code and exploit modules indexed by Sploitus

Cisco Device Hardcoded Credentials / GNU glibc / BusyBox
2019-09-04 T. WeberPACKETSTORM
glibc ld.so - Memory Leak / Buffer Overflow Vulnerability
2017-12-14 Qualys CorporationZDTPerl
GNU C Library Dynamic Loader glibc ld.so - Memory Leak Buffer Overflow
2017-12-13 Qualys CorporationEXPLOITPACKPerl
GNU C Library Dynamic Loader glibc ld.so - Memory Leak / Buffer Overflow
2017-12-13 Qualys CorporationEXPLOITDBPerl
Qualys Security Advisory - GNU C Library Memory Leak / Buffer Overflow
2017-12-13 Qualys Security AdvisoryPACKETSTORMPerl
Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - ldso_dynamic Local Pri
2017-06-29 Qualys CorporationZDTC
Linux Kernel (Debian 7.7/8.5/9.0 / Ubuntu 14.04.2/16.04.2/17.04 / Fedora 22/25 / CentOS 7.3.1611) -
2017-06-29 Qualys CorporationZDTC
Linux Kernel (Debian 7/8/9/10 / Fedora 23/24/25 / CentOS 5.3/5.11/6.0/6.8/7.2.1511) - ldso_hwcap Loc
2017-06-29 Qualys CorporationZDTC
Linux Kernel (Debian 910 Ubuntu 14.04.516.04.217.04 Fedora 232425) - ldso_dynamic Stack Clash Local Privilege Escalation
2017-06-28 Qualys CorporationEXPLOITPACKC
Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - 'ldso_dynamic Stack Clash' Local Privilege Escalation
2017-06-28 Qualys CorporationEXPLOITDBC
Linux Kernel (Debian 7.78.59.0 Ubuntu 14.04.216.04.217.04 Fedora 2225 CentOS 7.3.1611) - ldso_hwcap_64 Stack Clash Local Privilege Escalation
2017-06-28 Qualys CorporationEXPLOITPACKC
Linux Kernel (Debian 7.7/8.5/9.0 / Ubuntu 14.04.2/16.04.2/17.04 / Fedora 22/25 / CentOS 7.3.1611) - 'ldso_hwcap_64 Stack Clash' Local Privilege Escalation
2017-06-28 Qualys CorporationEXPLOITDBC
Linux Kernel (Debian 78910 Fedora 232425 CentOS 5.35.116.06.87.2.1511) - ldso_hwcap Stack Clash Local Privilege Escalation
2017-06-28 Qualys CorporationEXPLOITPACKC
Linux Kernel (Debian 7/8/9/10 / Fedora 23/24/25 / CentOS 5.3/5.11/6.0/6.8/7.2.1511) - 'ldso_hwcap Stack Clash' Local Privilege Escalation
2017-06-28 Qualys CorporationEXPLOITDBC