Critical severity9.8NVD Advisory· Published Jun 19, 2017· Updated Jun 17, 2026

CVE-2017-1000375

Description

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NetBSD/NetBSD2 versions
cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*range: <=7.1
- (no CPE)

Patches

Vulnerability mechanics

References

www.qualys.com/2017/06/19/stack-clash/stack-clash.txtnvdExploitThird Party Advisory
www.securityfocus.com/bid/99257nvdThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/42272/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.015
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000