Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD’s KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Linux on the Atari Jaguar

Linux on the Atari Jaguar Source: Hacker News

Read More

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws

Read More

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and

Read More