News for hackers. Stuff that matters.

A comment on Escalation of Privilege Advisory. Parent comment

Re:Escalation of Privilege Advisory by 0x0 on Monday May 01, 2017 @05:17PM (#14241727)
It looks like this also affects systems where the feature is not enabled, but for "local" attackers. Does that mean exec as "www-data" or "nobody" accounts (what about VMs?). Making every little wordpress plugin vulnerability into a CPU-rooting hack?
[ Parent | on HN ]
Re:Escalation of Privilege Advisory by Kalium on Monday May 01, 2017 @05:21PM (#14241769)
From what we can see so far, potentially more the latter than the former.
[ Parent | on HN ]