Dirty cow – privilege escalation vuln. in the Linux Kernel • Hacker News Board

Dirty cow – privilege escalation vuln. in the Linux Kernel

#1

Post by adm_hn » Thu, Oct 20, 2016, 12:42 PM UTC

Dirty cow – privilege escalation vuln. in the Linux Kernel
dirtycow.ninja

Re: Dirty cow – privilege escalation vuln. in the Linux Kernel

#2

Post by 0x0 » Thu, Oct 20, 2016, 4:13 PM UTC

The "am I affected" section is incredibly misinformative. Reading the page on iOS it merely says "no" with no further explanation... So maybe the bug was just in an unreleased development kernel? Nope, Debian just released patches I needed to apply on my servers. So I was definitively affected and the page lied. Looks like it's just some javascript looking for "linux" or "android" in the user-agent string. It'll probably even say "yes" if you're browsing on a patched linux pc.

Re: Dirty cow – privilege escalation vuln. in the Linux Kernel

#3

Post by [deleted] » Thu, Oct 20, 2016, 4:40 PM UTC

0x0 wrote: post #2

The "am I affected" section is incredibly misinformative. Reading the page on iOS it merely says "no" with no further explanation... So maybe the bug was just in an unreleased development kernel? Nope, Debian just released patches I needed to apply on my servers. So I was definitively affected and the page lied. Looks like it's just some javascript looking for "linux" or "android" in the user-agent string. It'll prob…

[deleted]

Re: Dirty cow – privilege escalation vuln. in the Linux Kernel

#4

Post by sne11ius » Thu, Oct 20, 2016, 5:36 PM UTC

0x0 wrote: post #2

The "am I affected" section is incredibly misinformative. Reading the page on iOS it merely says "no" with no further explanation... So maybe the bug was just in an unreleased development kernel? Nope, Debian just released patches I needed to apply on my servers. So I was definitively affected and the page lied. Looks like it's just some javascript looking for "linux" or "android" in the user-agent string. It'll prob…

Yes, take a look at the source:

  document.write(navigator.userAgent.match(/Linux|Android/)?'Yes':'Nope')

Its embarrassing imo. If you feel your vuln. is so important it needs to have its own website, at least give reliable info about this or tell us why you can't.

Re: Dirty cow – privilege escalation vuln. in the Linux Kernel

#5

Post by Daviey » Thu, Oct 20, 2016, 6:52 PM UTC

sne11ius wrote: post #4

0x0 wrote: post #2

The "am I affected" section is incredibly misinformative. Reading the page on iOS it merely says "no" with no further explanation... So maybe the bug was just in an unreleased development kernel? Nope, Debian just released patches I needed to apply on my servers. So I was definitively affected and the page lied. Looks like it's just some javascript looking for "linux" or "android" in the user-agent string. It'll prob…

Yes, take a look at the source: document.write(navigator.userAgent.match(/Linux|Android/)?'Yes':'Nope') Its embarrassing imo. If you feel your vuln. is so important it needs to have its own website, at least give reliable info about this or tell us why you can't.