**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains
that target AArch64 allows an attacker to exploit an existing buffer
overflow in dynamically-sized local variables in your application
without this being detected. This stack-protector failure only applies
to C99-style dynamically-sized local variables or those created using
alloca(). The stack-protector operates as intended for statically-sized
local variables.
The default behavior when the stack-protector
detects an overflow is to terminate your application, resulting in
controlled loss of availability. An attacker who can exploit a buffer
overflow without triggering the stack-protector might be able to change
program flow control to cause an uncontrolled loss of availability or to
go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.
References
Link | Resource |
---|---|
https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64 | Exploit Patch Third Party Advisory |
https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf | Exploit Patch Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Arm
Published: 2023-09-13T08:05:10.274Z
Updated: 2023-09-13T08:05:10.274Z
Reserved: 2023-08-01T10:38:03.032Z
Link: CVE-2023-4039
JSON object: View
NVD Information
Status : Modified
Published: 2023-09-13T09:15:15.690
Modified: 2024-06-13T23:15:50.137
Link: CVE-2023-4039
JSON object: View
Redhat Information
No data.
CWE