Resultados

2 casos · pág. 1/1

thehackernews.com · há 2d high

Public PoC chains 37-year-old OpenBSD shmat integer overflow with kernel UAF for root on OpenBSD 7.9, bypassing KARL, SMAP and SMEP

Security firm Calif published a full writeup and proof-of-concept code for a local privilege escalation exploit that gains root on OpenBSD 7.9. It chains a roughly 37-year-old integer overflow in the shared-memory attach path with a separate kernel flaw, and it bypasses KARL, SMAP and SMEP. OpenBSD patched both issues in September (errata…

securityaffairs.com · há 2d medium

Calif publishes OpenBSD 7.9 root exploit chaining 37-year-old shm_nattch overflow with kernel out-of-bounds write; patched

Cybersecurity firm Calif published a full exploit and write-up for a local privilege escalation to root on OpenBSD 7.9, chaining two kernel flaws, one of which is a 37-year-old integer overflow inherited from the original BSD sources. The exploit bypasses KARL address randomization and SMAP/SMEP protections without requiring any informati…