Skip to content
Heist/ feed
Medium

GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64

Type: advisorySource: Official CVE List1 source record

**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style dynamically-sized local variables or those created using alloca(). The stack-protector operates as intended for statically-sized local variables. The default behavior when the stack-protector detects an overflow is to terminate your application, resulting in controlled loss of availability. An attacker who can exploit a buffer overflow without triggering the stack-protector might be able to change program flow control to cause an uncontrolled loss of availability or to go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself.

Announced Source revision 1
Original source ↗

CVE-2023-4039

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2023-4039

Arm GNU Toolchain

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

GCC

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "Arm Ltd",
    "product": "Arm GNU Toolchain",
    "versions": [
      {
        "status": "affected",
        "version": "All versions where option -fstack-protector is used"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "GNU",
    "product": "GCC",
    "versions": [
      {
        "status": "affected",
        "version": "All versions of GCC that target AArch64 when option -fstack-protector is used"
      }
    ],
    "defaultStatus": "unaffected"
  }
]
Related CVEs
CVE-2023-4039

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#24268 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement