CVE ID:	CVE-2017-1000366
Description:	glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2017.1621.1   1.3.6.1.4.1.25623.1.1.4.2017.2699.1   1.3.6.1.4.1.25623.1.0.872783   1.3.6.1.4.1.25623.1.1.13.2017.181.01   1.3.6.1.4.1.25623.1.0.871831   1.3.6.1.4.1.25623.1.0.890992   1.3.6.1.4.1.25623.1.0.882737   1.3.6.1.4.1.25623.1.1.4.2017.1614.1   1.3.6.1.4.1.25623.1.1.10.2017.0184   1.3.6.1.4.1.25623.1.1.4.2017.2701.1   1.3.6.1.4.1.25623.1.1.4.2017.1619.1   1.3.6.1.4.1.25623.1.0.872790   1.3.6.1.4.1.25623.1.0.882736   1.3.6.1.4.1.25623.1.1.4.2017.1611.1   1.3.6.1.4.1.25623.1.0.843219   1.3.6.1.4.1.25623.1.1.4.2017.2700.1   1.3.6.1.4.1.25623.1.0.703887   1.3.6.1.4.1.25623.1.1.12.2017.3323.2   1.3.6.1.4.1.25623.1.0.871830   1.3.6.1.4.1.25623.1.0.851570
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1000366 BugTraq ID: 99127 http://www.securityfocus.com/bid/99127 Bugtraq: 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X (Google Search) https://seclists.org/bugtraq/2019/Sep/7 Debian Security Information: DSA-3887 (Google Search) http://www.debian.org/security/2017/dsa-3887 https://www.exploit-db.com/exploits/42274/ https://www.exploit-db.com/exploits/42275/ https://www.exploit-db.com/exploits/42276/ http://seclists.org/fulldisclosure/2019/Sep/7 https://security.gentoo.org/glsa/201706-19 http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt RedHat Security Advisories: RHSA-2017:1479 https://access.redhat.com/errata/RHSA-2017:1479 RedHat Security Advisories: RHSA-2017:1480 https://access.redhat.com/errata/RHSA-2017:1480 RedHat Security Advisories: RHSA-2017:1481 https://access.redhat.com/errata/RHSA-2017:1481 RedHat Security Advisories: RHSA-2017:1567 https://access.redhat.com/errata/RHSA-2017:1567 RedHat Security Advisories: RHSA-2017:1712 https://access.redhat.com/errata/RHSA-2017:1712 http://www.securitytracker.com/id/1038712