CVE-2017-1000374: Netbsd

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions.

Affected products

• Netbsd Netbsd: up to and including 7.1

Published 2017-06-19. Last modified 2026-06-17.