QwikSec

Security Database

CVE

CWE

Training

CVE-2017-1000373

Published: Jun 19, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in arbitrary code execution attacks. This affects OpenBSD 6.1 and possibly earlier versions.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

exploit

x_refsource_EXPLOIT-DB

https://support.apple.com/HT208144

x_refsource_CONFIRM

https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

x_refsource_MISC

https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/qsort.c?rev=1.15&content-type=text/x-cvsweb-markup

x_refsource_MISC

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_SECTRACK

https://support.apple.com/HT208113

x_refsource_CONFIRM

https://support.apple.com/HT208112

x_refsource_CONFIRM

https://support.apple.com/HT208115

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.