CVE-2023-4039

一、漏洞信息
 漏洞编号：[CVE-2023-4039](https://nvd.nist.gov/vuln/detail/CVE-2023-4039)
 漏洞归属组件：[gcc-7](https://gitee.com/src-openeuler/gcc-7)
 漏洞归属的版本：7.3.0
 CVSS V3.x分值：
  BaseScore：4.8 Medium
  Vector：CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
 漏洞简述：
  **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables.The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.
 漏洞公开时间：2023-09-13 17:15:15
 漏洞创建时间：2025-02-11 10:51:00
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2023-4039
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| arm-security.arm.com | https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64 |  |
| arm-security.arm.com | https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf |  |
| redhat_bugzilla | https://inbox.sourceware.org/gcc-patches/20230912152529.3322336-1-richard.sandiford@arm.com/ | https://bugzilla.redhat.com/show_bug.cgi?id=2233236 |
| redhat_bugzilla | https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64 | https://bugzilla.redhat.com/show_bug.cgi?id=2233236 |
| redhat_bugzilla | https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf | https://bugzilla.redhat.com/show_bug.cgi?id=2233236 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2023-4039 |
| oracle |  | https://www.oracle.com/security-alerts/cpuoct2023.html |
| cve_search |  | https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf |
| cve_search |  | https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64 |
| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-4039 | https://explore.alas.aws.amazon.com/CVE-2023-4039.html |
| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039 | https://explore.alas.aws.amazon.com/CVE-2023-4039.html |
| snyk | https://bugzilla.redhat.com/show_bug.cgi?id=2233236 | https://security.snyk.io/vuln/SNYK-UNMANAGED-GCC-5898488 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64 |  | nvd |
|  |  | https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf |  | nvd |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
                                         
 openEuler评分：
  4.8
 Vector：CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
 受影响版本排查(受影响/不受影响)：
  1.master:
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next:
7.openEuler-24.03-LTS-SP1:
8.openEuler-24.03-LTS-SP2:

修复是否涉及abi变化(是/否)：
  1.master:
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next:
7.openEuler-24.03-LTS-SP1:
8.openEuler-24.03-LTS-SP2:

原因说明：
  1.master:
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3:
4.openEuler-22.03-LTS-SP4:
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next:
7.openEuler-24.03-LTS-SP1:
8.openEuler-24.03-LTS-SP2:

src-openEuler/gcc-7
Closed

Content Risk Flag

Comments (3)

src-openEuler/gcc-7Closed .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2023-4039

Comments (3)

Search

src-openEuler/gcc-7
Closed