CVE-2017-1000376 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-1000376 Interim 1 39 2023-06-13T00:58:44Z current 2021-05-30T14:06:16Z 2023-06-13T00:58:44Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-1000376 libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2018-January/007862.html E-Mail link for SUSE-SU-2018:0300-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Magnum Orchestration 7 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Toolchain 12 cpp43-4.3.4_20091019-37.3.1 cpp43-4.3.4_20091019-7.3.1 gcc43-32bit-4.3.4_20091019-37.3.1 gcc43-32bit-4.3.4_20091019-7.3.1 gcc43-4.3.4_20091019-37.3.1 gcc43-4.3.4_20091019-7.3.1 gcc43-ada-4.3.4_20091019-37.3.1 gcc43-c++-4.3.4_20091019-37.3.1 gcc43-c++-4.3.4_20091019-7.3.1 gcc43-fortran-32bit-4.3.4_20091019-37.3.1 gcc43-fortran-32bit-4.3.4_20091019-7.3.1 gcc43-fortran-4.3.4_20091019-37.3.1 gcc43-fortran-4.3.4_20091019-7.3.1 gcc43-info-4.3.4_20091019-37.3.1 gcc43-info-4.3.4_20091019-7.3.1 gcc43-locale-4.3.4_20091019-37.3.1 gcc43-locale-4.3.4_20091019-7.3.1 gcc43-obj-c++-4.3.4_20091019-37.3.1 gcc43-objc-32bit-4.3.4_20091019-37.3.1 gcc43-objc-4.3.4_20091019-37.3.1 libada43-4.3.4_20091019-37.3.1 libffi-devel-gcc5 libffi-devel-gcc5-32bit libffi-gcc5 libffi4 libffi4-32bit libobjc43-32bit-4.3.4_20091019-37.3.1 libobjc43-4.3.4_20091019-37.3.1 libstdc++43-devel-32bit-4.3.4_20091019-37.3.1 libstdc++43-devel-32bit-4.3.4_20091019-7.3.1 libstdc++43-devel-4.3.4_20091019-37.3.1 libstdc++43-devel-4.3.4_20091019-7.3.1 libstdc++43-doc-4.3.4_20091019-7.3.1 cpp43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 gcc43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 gcc43-c++-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 gcc43-info-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 gcc43-locale-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 libstdc++43-devel-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 cpp43-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA gcc43-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA gcc43-32bit-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA gcc43-c++-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA gcc43-fortran-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA gcc43-fortran-32bit-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA gcc43-info-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA gcc43-locale-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libstdc++43-devel-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libstdc++43-devel-32bit-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libstdc++43-doc-4.3.4_20091019-7.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA cpp43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS gcc43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS gcc43-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS gcc43-c++-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS gcc43-info-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS gcc43-locale-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libstdc++43-devel-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libstdc++43-devel-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS cpp43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA gcc43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA gcc43-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA gcc43-c++-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA gcc43-fortran-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA gcc43-fortran-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA gcc43-info-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA gcc43-locale-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libstdc++43-devel-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libstdc++43-devel-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA cpp43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 gcc43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 gcc43-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 gcc43-c++-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 gcc43-info-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 gcc43-locale-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 libstdc++43-devel-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 libstdc++43-devel-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 cpp43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gcc43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gcc43-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gcc43-c++-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gcc43-info-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gcc43-locale-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libstdc++43-devel-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libstdc++43-devel-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 cpp43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 gcc43-ada-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 gcc43-fortran-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 gcc43-fortran-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 gcc43-obj-c++-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 gcc43-objc-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 gcc43-objc-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libada43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libobjc43-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libobjc43-32bit-4.3.4_20091019-37.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libffi-gcc5 as a component of Magnum Orchestration 7 libffi-devel-gcc5 as a component of SUSE Linux Enterprise Module for Toolchain 12 libffi-devel-gcc5-32bit as a component of SUSE Linux Enterprise Module for Toolchain 12 libffi-gcc5 as a component of SUSE Linux Enterprise Module for Toolchain 12 libffi4 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libffi4-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libffi-gcc5 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libffi4 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libffi4-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libffi-gcc5 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libffi4 as a component of SUSE Linux Enterprise Server 12 SP2 libffi4-32bit as a component of SUSE Linux Enterprise Server 12 SP2 libffi-gcc5 as a component of SUSE Linux Enterprise Server 12 SP2 libffi4 as a component of SUSE Linux Enterprise Server 12-LTSS libffi4-32bit as a component of SUSE Linux Enterprise Server 12-LTSS libffi-gcc5 as a component of SUSE Linux Enterprise Server 12-LTSS libffi-devel-gcc5 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libffi-devel-gcc5-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libffi-gcc5 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1. CVE-2017-1000376 SUSE Linux Enterprise Point of Sale 11 SP3:cpp43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:gcc43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:gcc43-c++-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:gcc43-info-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:gcc43-locale-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:libstdc++43-devel-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:cpp43-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:gcc43-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:gcc43-32bit-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:gcc43-c++-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:gcc43-fortran-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:gcc43-fortran-32bit-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:gcc43-info-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:gcc43-locale-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libstdc++43-devel-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libstdc++43-devel-32bit-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libstdc++43-doc-4.3.4_20091019-7.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:cpp43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:gcc43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:gcc43-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:gcc43-c++-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:gcc43-info-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:gcc43-locale-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libstdc++43-devel-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libstdc++43-devel-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:cpp43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:gcc43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:gcc43-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:gcc43-c++-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:gcc43-fortran-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:gcc43-fortran-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:gcc43-info-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:gcc43-locale-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libstdc++43-devel-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libstdc++43-devel-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP4:cpp43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP4:gcc43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP4:gcc43-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP4:gcc43-c++-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP4:gcc43-info-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP4:gcc43-locale-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP4:libstdc++43-devel-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server 11 SP4:libstdc++43-devel-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:cpp43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gcc43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gcc43-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gcc43-c++-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gcc43-info-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:gcc43-locale-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libstdc++43-devel-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libstdc++43-devel-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:cpp43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gcc43-ada-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gcc43-fortran-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gcc43-fortran-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gcc43-obj-c++-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gcc43-objc-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:gcc43-objc-32bit-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libada43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libobjc43-4.3.4_20091019-37.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libobjc43-32bit-4.3.4_20091019-37.3.1 Magnum Orchestration 7:libffi-gcc5 SUSE Linux Enterprise Module for Toolchain 12:libffi-devel-gcc5 SUSE Linux Enterprise Module for Toolchain 12:libffi-devel-gcc5-32bit SUSE Linux Enterprise Module for Toolchain 12:libffi-gcc5 SUSE Linux Enterprise Server 11 SP4-LTSS:libffi-gcc5 SUSE Linux Enterprise Server 11 SP4-LTSS:libffi4 SUSE Linux Enterprise Server 11 SP4-LTSS:libffi4-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:libffi-gcc5 SUSE Linux Enterprise Server 12 SP1-LTSS:libffi4 SUSE Linux Enterprise Server 12 SP1-LTSS:libffi4-32bit SUSE Linux Enterprise Server 12 SP2:libffi-gcc5 SUSE Linux Enterprise Server 12 SP2:libffi4 SUSE Linux Enterprise Server 12 SP2:libffi4-32bit SUSE Linux Enterprise Server 12-LTSS:libffi-gcc5 SUSE Linux Enterprise Server 12-LTSS:libffi4 SUSE Linux Enterprise Server 12-LTSS:libffi4-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:libffi-devel-gcc5 SUSE Linux Enterprise Software Development Kit 11 SP4:libffi-devel-gcc5-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:libffi-gcc5 moderate 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C 7.4 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H