Bug 1462164 (CVE-2017-1000376)

Summary:	CVE-2017-1000376 libffi: Requests an executable stack
Product:	[Other] Security Response	Reporter:	Andrej Nemec <anemec>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	abhgupta, aph, bmcclain, c.david86, cfergeau, dblechte, dkholia, eedri, erik-fedora, green, kseifried, lkundrak, lsurette, mgoldboi, michal.skrivanek, negativo17, pbonzini, rbalakri, rh-spice-bugs, sardella, security-response-team, sherold, srevivo, tiwillia, ykaul, ylavi
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-07-03 10:34:47 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1462830, 1462831, 1462832
Bug Blocks:	1449010, 1463201

Description Andrej Nemec 2017-06-16 10:50:28 UTC

libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries.

Upstream patch:

https://github.com/libffi/libffi/commit/978c9540154d320525488db1b7049277122f736d

Comment 1 Andrej Nemec 2017-06-16 10:50:40 UTC

Acknowledgments:

Name: Qualys Inc

Comment 2 Andrej Nemec 2017-06-16 10:51:28 UTC

External References:

https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

Comment 3 Petr Matousek 2017-06-19 16:08:24 UTC

Created libffi tracking bugs for this issue:

Affects: fedora-all [bug 1462832]


Created mingw-libffi tracking bugs for this issue:

Affects: epel-7 [bug 1462830]
Affects: fedora-all [bug 1462831]