UBUNTU-CVE-2017-1000376

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2017-1000376
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-1000376.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-1000376
Related
Published
2017-06-19T00:00:00Z
Modified
2025-01-13T10:21:31Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • 7.0 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1.

References

Affected packages

Ubuntu:14.04:LTS / libffi

Package

Name
libffi
Purl
pkg:deb/ubuntu/libffi@3.1~rc1+r3.0.13-12ubuntu0.2?arch=source&distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.1~rc1+r3.0.13-12ubuntu0.2

Affected versions

3.*

3.0.13-4
3.0.13-5
3.0.13-6
3.0.13-9ubuntu1
3.0.13-10
3.0.13-10build1
3.0.13-11
3.0.13-12
3.1~rc1-2
3.1~rc1+r3.0.13-12
3.1~rc1+r3.0.13-12ubuntu0.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "3.1~rc1+r3.0.13-12ubuntu0.2",
            "binary_name": "libffi-dev"
        },
        {
            "binary_version": "3.1~rc1+r3.0.13-12ubuntu0.2",
            "binary_name": "libffi-dev-dbgsym"
        },
        {
            "binary_version": "3.1~rc1+r3.0.13-12ubuntu0.2",
            "binary_name": "libffi6"
        },
        {
            "binary_version": "3.1~rc1+r3.0.13-12ubuntu0.2",
            "binary_name": "libffi6-dbg"
        },
        {
            "binary_version": "3.1~rc1+r3.0.13-12ubuntu0.2",
            "binary_name": "libffi6-dbgsym"
        },
        {
            "binary_version": "3.1~rc1+r3.0.13-12ubuntu0.2",
            "binary_name": "libffi6-udeb"
        },
        {
            "binary_version": "3.1~rc1+r3.0.13-12ubuntu0.2",
            "binary_name": "libffi6-udeb-dbgsym"
        }
    ]
}