Re:Multiple Bugs in OpenBSD Kernel
by viraptor on Friday July 15, 2016 @04:05AM
(#12099513)
> a bug in recv, send or other networking syscalls certainly could be much worse than a local priv escalation
I think that's very unlikely. Since most of the socket API ignores the payload (it's just opaque data), I don't see how recv/send issue could be triggered from outside. Syscall vulnerabilities are usually based on bad flags, bad addresses, or type confusions. Normally you have to have local access to control those.
I think that's very unlikely. Since most of the socket API ignores the payload (it's just opaque data), I don't see how recv/send issue could be triggered from outside. Syscall vulnerabilities are usually based on bad flags, bad addresses, or type confusions. Normally you have to have local access to control those.