Vulnerability Details CVE-2017-1000366
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.078
EPSS Ranking 91.5%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
Products affected by CVE-2017-1000366
-
-
-
-
cpe:2.3:a:gnu:glibc:0.4.1
-
-
-
-
-
-
-
-
-
-
cpe:2.3:a:gnu:glibc:1.06.1
-
cpe:2.3:a:gnu:glibc:1.06.10
-
cpe:2.3:a:gnu:glibc:1.06.11
-
cpe:2.3:a:gnu:glibc:1.06.12
-
cpe:2.3:a:gnu:glibc:1.06.13
-
cpe:2.3:a:gnu:glibc:1.06.2
-
cpe:2.3:a:gnu:glibc:1.06.3
-
cpe:2.3:a:gnu:glibc:1.06.4
-
cpe:2.3:a:gnu:glibc:1.06.6
-
cpe:2.3:a:gnu:glibc:1.06.7
-
cpe:2.3:a:gnu:glibc:1.06.8
-
cpe:2.3:a:gnu:glibc:1.06.9
-
-
cpe:2.3:a:gnu:glibc:1.07.1
-
cpe:2.3:a:gnu:glibc:1.07.2
-
cpe:2.3:a:gnu:glibc:1.07.3
-
cpe:2.3:a:gnu:glibc:1.07.4
-
cpe:2.3:a:gnu:glibc:1.07.5
-
cpe:2.3:a:gnu:glibc:1.07.6
-
-
cpe:2.3:a:gnu:glibc:1.08.1
-
cpe:2.3:a:gnu:glibc:1.08.10
-
cpe:2.3:a:gnu:glibc:1.08.11
-
cpe:2.3:a:gnu:glibc:1.08.12
-
cpe:2.3:a:gnu:glibc:1.08.13
-
cpe:2.3:a:gnu:glibc:1.08.14
-
cpe:2.3:a:gnu:glibc:1.08.3
-
cpe:2.3:a:gnu:glibc:1.08.4
-
cpe:2.3:a:gnu:glibc:1.08.5
-
cpe:2.3:a:gnu:glibc:1.08.6
-
cpe:2.3:a:gnu:glibc:1.08.7
-
cpe:2.3:a:gnu:glibc:1.08.8
-
cpe:2.3:a:gnu:glibc:1.08.9
-
-
cpe:2.3:a:gnu:glibc:1.09.1
-
cpe:2.3:a:gnu:glibc:1.09.2
-
cpe:2.3:a:gnu:glibc:1.09.3
-
cpe:2.3:a:gnu:glibc:1.09.5
-
-
-
-
-
-
cpe:2.3:a:gnu:glibc:2.0.1
-
cpe:2.3:a:gnu:glibc:2.0.100
-
cpe:2.3:a:gnu:glibc:2.0.101
-
cpe:2.3:a:gnu:glibc:2.0.103
-
cpe:2.3:a:gnu:glibc:2.0.106
-
cpe:2.3:a:gnu:glibc:2.0.112
-
cpe:2.3:a:gnu:glibc:2.0.2
-
cpe:2.3:a:gnu:glibc:2.0.3
-
cpe:2.3:a:gnu:glibc:2.0.4
-
cpe:2.3:a:gnu:glibc:2.0.5
-
cpe:2.3:a:gnu:glibc:2.0.6
-
cpe:2.3:a:gnu:glibc:2.0.92
-
cpe:2.3:a:gnu:glibc:2.0.95
-
cpe:2.3:a:gnu:glibc:2.0.96
-
cpe:2.3:a:gnu:glibc:2.0.97
-
cpe:2.3:a:gnu:glibc:2.0.98
-
cpe:2.3:a:gnu:glibc:2.0.99
-
-
cpe:2.3:a:gnu:glibc:2.1.1
-
cpe:2.3:a:gnu:glibc:2.1.1.6
-
cpe:2.3:a:gnu:glibc:2.1.2
-
cpe:2.3:a:gnu:glibc:2.1.3
-
cpe:2.3:a:gnu:glibc:2.1.3.10
-
cpe:2.3:a:gnu:glibc:2.1.9
-
cpe:2.3:a:gnu:glibc:2.1.91
-
cpe:2.3:a:gnu:glibc:2.1.92
-
cpe:2.3:a:gnu:glibc:2.1.93
-
cpe:2.3:a:gnu:glibc:2.1.94
-
cpe:2.3:a:gnu:glibc:2.1.95
-
cpe:2.3:a:gnu:glibc:2.1.96
-
cpe:2.3:a:gnu:glibc:2.1.97
-
-
cpe:2.3:a:gnu:glibc:2.10.1
-
cpe:2.3:a:gnu:glibc:2.10.2
-
-
cpe:2.3:a:gnu:glibc:2.11.1
-
cpe:2.3:a:gnu:glibc:2.11.2
-
cpe:2.3:a:gnu:glibc:2.11.3
-
-
cpe:2.3:a:gnu:glibc:2.12.0
-
cpe:2.3:a:gnu:glibc:2.12.1
-
cpe:2.3:a:gnu:glibc:2.12.2
-
-
-
cpe:2.3:a:gnu:glibc:2.14.1
-
cpe:2.3:a:gnu:glibc:2.14.9000
-
-
-
cpe:2.3:a:gnu:glibc:2.16.0
-
cpe:2.3:a:gnu:glibc:2.16.90
-
-
cpe:2.3:a:gnu:glibc:2.17.90
-
-
cpe:2.3:a:gnu:glibc:2.18.90
-
-
cpe:2.3:a:gnu:glibc:2.19.90
-
-
cpe:2.3:a:gnu:glibc:2.2.1
-
cpe:2.3:a:gnu:glibc:2.2.2
-
cpe:2.3:a:gnu:glibc:2.2.3
-
cpe:2.3:a:gnu:glibc:2.2.4
-
cpe:2.3:a:gnu:glibc:2.2.5
-
-
cpe:2.3:a:gnu:glibc:2.20.90
-
-
cpe:2.3:a:gnu:glibc:2.21.90
-
-
cpe:2.3:a:gnu:glibc:2.22.90
-
-
cpe:2.3:a:gnu:glibc:2.23.90
-
-
cpe:2.3:a:gnu:glibc:2.24.90
-
-
-
cpe:2.3:a:gnu:glibc:2.3.1
-
cpe:2.3:a:gnu:glibc:2.3.10
-
cpe:2.3:a:gnu:glibc:2.3.2
-
cpe:2.3:a:gnu:glibc:2.3.3
-
cpe:2.3:a:gnu:glibc:2.3.4
-
cpe:2.3:a:gnu:glibc:2.3.5
-
cpe:2.3:a:gnu:glibc:2.3.6
-
-
-
cpe:2.3:a:gnu:glibc:2.5.1
-
-
cpe:2.3:a:gnu:glibc:2.6.1
-
-
-
-
cpe:2.3:a:mcafee:web_gateway:7.0.0
-
cpe:2.3:a:mcafee:web_gateway:7.2.0.1
-
cpe:2.3:a:mcafee:web_gateway:7.2.0.2
-
cpe:2.3:a:mcafee:web_gateway:7.2.0.3
-
cpe:2.3:a:mcafee:web_gateway:7.2.0.4
-
cpe:2.3:a:mcafee:web_gateway:7.2.0.5
-
cpe:2.3:a:mcafee:web_gateway:7.2.0.6
-
cpe:2.3:a:mcafee:web_gateway:7.2.0.7
-
cpe:2.3:a:mcafee:web_gateway:7.2.0.8
-
cpe:2.3:a:mcafee:web_gateway:7.2.0.9
-
cpe:2.3:a:mcafee:web_gateway:7.3.0
-
cpe:2.3:a:mcafee:web_gateway:7.3.2
-
cpe:2.3:a:mcafee:web_gateway:7.3.2.4
-
cpe:2.3:a:mcafee:web_gateway:7.3.2.6
-
cpe:2.3:a:mcafee:web_gateway:7.3.2.8
-
cpe:2.3:a:mcafee:web_gateway:7.3.2.9.
-
cpe:2.3:a:mcafee:web_gateway:7.4.0
-
cpe:2.3:a:mcafee:web_gateway:7.4.1
-
cpe:2.3:a:mcafee:web_gateway:7.4.1.3
-
cpe:2.3:a:mcafee:web_gateway:7.4.2
-
cpe:2.3:a:mcafee:web_gateway:7.5.0.0
-
cpe:2.3:a:mcafee:web_gateway:7.5.1
-
cpe:2.3:a:mcafee:web_gateway:7.5.2
-
cpe:2.3:a:mcafee:web_gateway:7.5.2.10
-
cpe:2.3:a:mcafee:web_gateway:7.5.2.11
-
cpe:2.3:a:mcafee:web_gateway:7.5.2.8
-
cpe:2.3:a:mcafee:web_gateway:7.6.0.0
-
cpe:2.3:a:mcafee:web_gateway:7.6.0.1
-
cpe:2.3:a:mcafee:web_gateway:7.6.1
-
cpe:2.3:a:mcafee:web_gateway:7.6.1.1
-
cpe:2.3:a:mcafee:web_gateway:7.6.1.2
-
cpe:2.3:a:mcafee:web_gateway:7.6.1.3
-
cpe:2.3:a:mcafee:web_gateway:7.6.2
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.1
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.10
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.11
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.12
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.13
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.14
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.2
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.3
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.4
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.5
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.6
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.7
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.8
-
cpe:2.3:a:mcafee:web_gateway:7.6.2.9
-
cpe:2.3:a:mcafee:web_gateway:7.7.0.0
-
cpe:2.3:a:mcafee:web_gateway:7.7.0.1
-
cpe:2.3:a:mcafee:web_gateway:7.7.0.2
-
cpe:2.3:a:mcafee:web_gateway:7.7.0.3
-
cpe:2.3:a:mcafee:web_gateway:7.7.1
-
cpe:2.3:a:mcafee:web_gateway:7.7.1.1
-
cpe:2.3:a:mcafee:web_gateway:7.7.1.2
-
cpe:2.3:a:mcafee:web_gateway:7.7.1.3
-
cpe:2.3:a:mcafee:web_gateway:7.7.1.4
-
cpe:2.3:a:mcafee:web_gateway:7.7.1.5
-
cpe:2.3:a:mcafee:web_gateway:7.7.2
-
cpe:2.3:a:mcafee:web_gateway:7.7.2.0
-
cpe:2.3:a:mcafee:web_gateway:7.7.2.1
-
cpe:2.3:a:mcafee:web_gateway:7.7.2.2
-
cpe:2.3:a:openstack:cloud_magnum_orchestration:7
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0
-
cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0
-
cpe:2.3:o:novell:suse_linux_enterprise_point_of_sale:11.0
-
cpe:2.3:o:novell:suse_linux_enterprise_server:11.0
-
cpe:2.3:o:opensuse:leap:42.2
-
cpe:2.3:o:redhat:enterprise_linux:5
-
cpe:2.3:o:redhat:enterprise_linux:6.0
-
cpe:2.3:o:redhat:enterprise_linux:7.0
-
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
-
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
-
cpe:2.3:o:redhat:enterprise_linux_server:6.0
-
cpe:2.3:o:redhat:enterprise_linux_server:6.6
-
cpe:2.3:o:redhat:enterprise_linux_server:7.0
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.2
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
-
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
-
cpe:2.3:o:redhat:enterprise_linux_server_long_life:5.9
-
cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5
-
cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6
-
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2
-
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3
-
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
-
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0
-
cpe:2.3:o:suse:linux_enterprise_for_sap:12
-
cpe:2.3:o:suse:linux_enterprise_server:10
-
cpe:2.3:o:suse:linux_enterprise_server:11
-
cpe:2.3:o:suse:linux_enterprise_server:12
-
cpe:2.3:o:suse:linux_enterprise_server_for_raspberry_pi:12
-
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11.0
-
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12.0