CVE-2017-1000374: A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulti...

Security readout for executives and security teams

This CVE describes a weakness in NetBSD's stack guard page protection. An attacker may bypass that protection and achieve arbitrary code execution through certain setuid binaries. The source bundle names NetBSD 7.1 and possibly earlier versions. No CISA KEV listing or cited source here confirms active exploitation. Exposure is most likely on NetBSD 7.1 and possibly earlier systems, particularly multi-user hosts or systems with reachable paths to execute setuid binaries. The provided affected-product metadata is incomplete, so inventory should not rely on CPE data alone. Prioritize remediation for any NetBSD 7.1 or older system with multiple users, exposed login paths, or sensitive workloads. The business risk is privilege escalation or arbitrary code execution on affected hosts, but evidence here is incomplete on active exploitation and exact fixed versions. Mitigation focus: Check official NetBSD guidance for CVE-2017-1000374 before choosing a fix.; Inventory NetBSD 7.1 and earlier systems, including unsupported legacy hosts.; Prioritize vendor-supported NetBSD updates where remediation is confirmed..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.