2545056 - RHEL security vulnerability CVE-2017-1000253 impact - SAP ASE, SRS, SAP IQ, SAP SA on RHEL

• A flaw was found in the way the Linux kernel loaded ELF executables.
• Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption.
• An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system.
• See more information in:
• Redhat > Security > Red Hat CVE Database > CVE-2017-1000253   
• Redhat > Security >  SecurityVulnerability Responses CVE-2017-1000253 - load_elf_binary does not allocate sufficient space

Read more...

• SAP Adaptive Server Entreprise (ASE) 15.7  and 16.0
• SAP Replication Server (SRS) 15.7 and 16.0
• SAP IQ 16.0 and 16.1
• SAP SQL Anywhere (SA) 16.0 and 17.0
• RedHat (RHEL):
• Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6.
• Linux kernel packages as shipped with Red Hat Enterprise Linux 7 prior to kernel version 3.10.0-693, that is Red Hat Enterprise Linux 7.4 GA kernel version.
• Kernel versions after 3.10.0-693 contain the fix and are thus not vulnerable. 

SAP Adaptive Server Enterprise 15.7 ; SAP Adaptive Server Enterprise 16.0 ; SAP IQ 16.0 ; SAP IQ 16.1 ; SAP Replication Server 15.7 ; SAP Replication Server 16.0 ; SAP SQL Anywhere 16.0 ; SAP SQL Anywhere 17.0

PIE, 3189592, -pie, CVE, 1000253 , KBA , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , BC-SYB-REP , Sybase Replication Server (standalone) , BC-SYB-IQ , Sybase IQ , BC-SYB-SQA , SQL Anywhere (on premise, on demand) , Problem