Synology-SA-17:58 Linux kernel
Publish Time: UTC+8
Last Updated: UTC+8
- Severity
- Important
- Status
- Resolved
Abstract
CVE-2017-1000253 allows local users to obtain privileges without consent from a vulnerable version of Synology DiskStation Manager (DSM) or Synology Router Manager (SRM).
Severity
- Impact: Important
- CVSS3 Base Score: 7.0
- CVSS3 Base Metrics: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected
- Products
- DSM 6.0
- DSM 5.2
- SRM 1.1
- Models
- All Synology models
Description
A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system.
Mitigation
None
Update Availability
To fix the security issue, please update DSM 5.2 to 5.2-5967-5 or above, DSM 6.0 to 6.0.3-8754-6 or above and SRM 1.1 to 1.1.5-6542-2 or above.
Reference