Bug 1044934 (CVE-2017-1000379)

Summary:	VUL-0: CVE-2017-1000379: kernel-source: Qualys: amd64 mapping PIE or heap over stack
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Marcus Meissner <meissner>
Component:	Incidents	Assignee:	Michal Hocko <mhocko>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P3 - Medium	CC:	bhavel, emu, heiko.rommel, hvdheuvel, jsegitz, mbenes, meissner, mlimardo, mpluskal, mrueckert, simonf.lees, tchvatal, vbabka, vcizek, vpelcak
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:	CVSSv2:NVD:CVE-2017-1000379:7.2:(AV:L/AC:L/Au:N/C:C/I:C/A:C) CVSSv2:SUSE:CVE-2017-1000379:1.2:(AV:L/AC:H/Au:N/C:N/I:P/A:N) CVSSv3:NVD:CVE-2017-1000379:7.8:(AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSSv3:RedHat:CVE-2017-1000379:2.9:(AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) CVSSv3:SUSE:CVE-2017-1000379:2.9:(AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---
Bug Depends on:
Bug Blocks:	1037551, 1039346

Comment 4 Marcus Meissner 2017-06-19 15:22:14 UTC

This issue is now public:

https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

Comment 5 Marcus Meissner 2017-07-10 07:43:44 UTC

i think it was solved with the new code