NVD

Id
86637  
Name
CVE-2017-7563  
Description
In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits (one bit versus two bits).  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-06-17  
Published
2017-06-07  
Modified Date
2017-06-15  
Seq
2017-7563  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
420425 86637 CVE-2016-3731 [oss-security] 20160517 Moodle security release 3.0.4, 2.9.6, 2.8.12, 2.7.14  View
420426 86637 CVE-2016-3731 1035902  View
420427 86637 CVE-2016-3731 https://bugzilla.redhat.com/show_bug.cgi?id=1335933  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68466 JVNDB-2017-004723 ARM Trusted Firmware における MT_EXECUTE_NEVER 保護メカニズムを回避される脆弱性 ARM Trusted Firmware は、AArch64 Secure EL1 において RO メモリが常時実行可能であるため、MT_EXECUTE_NEVER 保護メカニズムを回避される脆弱性が存在します。 CVE-2017-7563 0 CVE-2017-7563 86637 6.8 8.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004723.html 2017-04-06 2017-07-05 View