OpenBSD has a use-after-free allowing local privilege escalation to root
1–10 of 170 posts
Re: OpenBSD has a use-after-free allowing local privilege escalation to root
#2from the link:
sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget().
Re: OpenBSD has a use-after-free allowing local privilege escalation to root
#3Blasphemy
Re: OpenBSD has a use-after-free allowing local privilege escalation to root
#4Seems to be found as a part of Patch The Planet [0] which is basically OpenAI giving model access and Trail of Bits using them to find vulnerabilities in OSS projects.
Re: OpenBSD has a use-after-free allowing local privilege escalation to root
#5> Only two remote holes in the default install, in a heck of a long time!
Re: OpenBSD has a use-after-free allowing local privilege escalation to root
#6> Only two remote holes in the default install, in a heck of a long time! https://www.openbsd.org/ https://en.wikipedia.org/wiki/OpenBSD#Security_record
LPE (to root) is serious, but it's not a remote hole.
Re: OpenBSD has a use-after-free allowing local privilege escalation to root
#7[dead]
Re: OpenBSD has a use-after-free allowing local privilege escalation to root
#8OpenBSD's security stance being the stuff of legend, I'm curious how many vulns have been found over the last couple months while the big model companies are flaunting their ability to find exploits. It'd be super cool to see it remain tiny.
Re: OpenBSD has a use-after-free allowing local privilege escalation to root
#9If this is a local privilege escalation to root, why can't I find anything on https://www.openbsd.org/security.html ?
Re: OpenBSD has a use-after-free allowing local privilege escalation to root
#10OpenBSD's security stance being the stuff of legend, I'm curious how many vulns have been found over the last couple months while the big model companies are flaunting their ability to find exploits. It'd be super cool to see it remain tiny.
The commit logs over the last few months have highlighted when an issue was found by a program. They usually name the submitter and the tool.