DEBIAN-CVE-2017-1000376

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/DEBIAN-CVE-2017-1000376
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2017-1000376.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2017-1000376
Upstream
Published
2017-06-19T16:29:00Z
Modified
2025-09-19T06:23:17Z
Summary
[none]
Details

libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1.

References

Affected packages

Debian:11 / libffi

Package

Name
libffi
Purl
pkg:deb/debian/libffi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.2.1-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / libffi

Package

Name
libffi
Purl
pkg:deb/debian/libffi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.2.1-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / libffi

Package

Name
libffi
Purl
pkg:deb/debian/libffi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.2.1-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14 / libffi

Package

Name
libffi
Purl
pkg:deb/debian/libffi?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.2.1-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}