{"id":"CVE-2017-1000364","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-1000364","generatedAt":"2026-10-29T02:05:16.950Z","title":"An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be \"jumped\" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the…","description":"An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be \"jumped\" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).","published":"2017-06-19T16:29:00.000Z","lastModified":"2026-06-17T00:59:02.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":7.4,"severity":"HIGH","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-119"],"affected":["linux/linux kernel"],"epss":{"score":0.05186,"percentile":0.92421,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2018-10-16","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":45625,"kind":"exploit","title":"Solaris - RSH Stack Clash Privilege Escalation (Metasploit)","url":"https://www.exploit-db.com/exploits/45625","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/solaris/local/45625.rb","file":"exploits/solaris/local/45625.rb","published":"2018-10-16","added":"2018-10-16","updated":"2018-10-16","author":"Metasploit","type":"local","platform":"solaris","port":null,"verified":true,"codes":["CVE-2017-3630","CVE-2017-3629","CVE-2017-1000364","CVE-2017-3631"],"tags":"Local","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://raw.githubusercontent.com/rapid7/metasploit-framework/8877582086acca0f4ec1cf9bd371bbab53e642f4/modules/exploits/solaris/local/rsh_stack_clash_priv_esc.rb"}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB (verified) and the impact is high, while EPSS rates exploitation at 5.2%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"http://www.debian.org/security/2017/dsa-3886","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/99130","tags":["Issue Tracking","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1038724","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1482","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1483","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1484","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1485","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1486","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1487","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1488","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1489","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1490","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1491","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1567","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1616","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1647","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:1712","source":"cve@mitre.org"},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000364","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10205","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10207","source":"cve@mitre.org"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/45625/","source":"cve@mitre.org"},{"url":"https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.suse.com/security/cve/CVE-2017-1000364/","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.suse.com/support/kb/doc/?id=7020973","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2017/dsa-3886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/99130","tags":["Issue Tracking","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1038724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000364","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03800en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45625/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.suse.com/security/cve/CVE-2017-1000364/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.suse.com/support/kb/doc/?id=7020973","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000364","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}