libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1.

According to the version of the libffi packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - libffi requests an executable stack allowing attackers     to more easily trigger arbitrary code execution by     overwriting the stack. Please note that libffi is used     by a number of other libraries. It was previously     stated that this affects libffi version 3.2.1 but this     appears to be incorrect. libffi prior to version 3.1 on     32 bit x86 systems was vulnerable, and upstream is     believed to have fixed this issue in version     3.1.(CVE-2017-1000376)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libffi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - libffi requests an executable stack allowing attackers     to more easily trigger arbitrary code execution by     overwriting the stack. Please note that libffi is used     by a number of other libraries. It was previously     stated that this affects libffi version 3.2.1 but this     appears to be incorrect. libffi prior to version 3.1 on     32 bit x86 systems was vulnerable, and upstream is     believed to have fixed this issue in version     3.1.(CVE-2017-1000376)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libffi package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - libffi requests an executable stack allowing attackers     to more easily trigger arbitrary code execution by     overwriting the stack. Please note that libffi is used     by a number of other libraries. It was previously     stated that this affects libffi version 3.2.1 but this     appears to be incorrect. libffi prior to version 3.1 on     32 bit x86 systems was vulnerable, and upstream is     believed to have fixed this issue in version     3.1.(CVE-2017-1000376)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gcc43 fixes the following issues: Security issue fixed :

  - CVE-2017-1000376: Don't request excutable stack from     libffi. [bnc#1045091] New features :

  - Add support for retpolines to mitigate the Spectre     Variant 2 attack. [bnc#1074621]

  - Add support for zero-sized VLAs and allocas with

    -fstack-clash-protection. [bnc#1059075]

  - Add support for -fstack-clash-protection to mitigate the     Stack Clash attack. [bnc#1039513] Non security bugs     fixed :

  - Fixed build of 32bit libgcov.a with LFS support.
    [bsc#1044016]

  - Fixed issue with libstdc++ functional when an exception     is thrown during construction. [bsc#999596]

  - Fixed issue with using gcov and #pragma pack.
    [bsc#977654]

  - Fixed ICE compiling AFS modules for the s390x kernel.
    [bsc#938159]

  - Backport large file support from GCC 4.6.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that libffi incorrectly enforced an executable stack. An attacker could possibly use this issue, in combination with another vulnerability, to facilitate executing arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Disable executable stack for aarch64 builds.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries.

For Debian 7 'Wheezy', these problems have been fixed in version 3.0.10-3+deb7u1.

We recommend that you upgrade your libffi packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libffi, a library used to call code written in one language from code written in a different language, was enforcing an executable stack on the i386 architecture. While this might not be considered a vulnerability by itself, this could be leveraged when exploiting other vulnerabilities, like for example the 'stack clash' class of vulnerabilities discovered by Qualys Research Labs. For the full details, please refer to their advisory published at:
https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

ID	Name	Product	Family	Severity
142349	EulerOS 2.0 SP2 : libffi (EulerOS-SA-2020-2357)	Nessus	Huawei Local Security Checks	high
141715	EulerOS Virtualization 3.0.2.2 : libffi (EulerOS-SA-2020-2186)	Nessus	Huawei Local Security Checks	high
140880	EulerOS 2.0 SP3 : libffi (EulerOS-SA-2020-2113)	Nessus	Huawei Local Security Checks	high
137979	EulerOS Virtualization 3.0.6.0 : libffi (EulerOS-SA-2020-1760)	Nessus	Huawei Local Security Checks	high
128944	EulerOS Virtualization for ARM 64 3.0.2.0 : libffi (EulerOS-SA-2019-1941)	Nessus	Huawei Local Security Checks	high
126932	EulerOS 2.0 SP5 : libffi (EulerOS-SA-2019-1756)	Nessus	Huawei Local Security Checks	high
106530	SUSE SLES11 Security Update : gcc43 (SUSE-SU-2018:0300-1) (Stack Clash)	Nessus	SuSE Local Security Checks	high
103835	Ubuntu 14.04 LTS : libffi vulnerability (USN-3454-1)	Nessus	Ubuntu Local Security Checks	high
101618	Fedora 26 : libffi (2017-3fcc0d9152) (Stack Clash)	Nessus	Fedora Local Security Checks	high
100966	Debian DLA-997-1 : libffi security update (Stack Clash)	Nessus	Debian Local Security Checks	high
100880	Debian DSA-3889-1 : libffi - security update (Stack Clash)	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-1000376

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high