summaryrefslogtreecommitdiffstats
path: root/retired/CVE-2017-1000365
blob: f462754b1fddd97f52f62b625ddceae7d95cdf82 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
Description: argv and envp pointer arrays do not count toward the argument/environment size limit
References:
 https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
Notes:
 bwh> Introduced by commit b6a2fea39318 "mm: variable length argument support"
Bugs:
upstream: released (4.12-rc7) [98da7d08850fb8bdeb395d6368ed15753304aa0c]
4.9-upstream-stable: released (4.9.35) [3d6848e491df6abbf5fb5b1fabb7a5df2e2b8f4f]
3.16-upstream-stable: released (3.16.46) [d7575b387f81c1a92e32c25dcb6a0e14458ae66c]
3.2-upstream-stable: released (3.2.91) [cea299eb189fca09c413432b807abd607385b3bc]
sid: released (4.11.11-1)
4.9-stretch-security: released (4.9.30-2+deb9u3) [bugfix/all/fs-exec.c-account-for-argv-envp-pointers.patch]
3.16-jessie-security: released (3.16.43-2+deb8u3) [bugfix/all/fs-exec.c-account-for-argv-envp-pointers.patch]
3.2-wheezy-security: released (3.2.93-1)

© 2014-2024 Faster IT GmbH | imprint | privacy policy