News for hackers. Stuff that matters.

A comment on CVE-2021-22555: Turning \x00\x00 into 10000$.

Re:CVE-2021-22555: Turning \x00\x00 into 10000$ by instance on Thursday July 15, 2021 @05:35AM (#27842909)
Is it just me, or is this is super similar to Dirty Cow [0] in terms of severity? Insane find!!

[0]: https://en.wikipedia.org/wiki/Dirty_COW

[ Parent | on HN ]
Re:CVE-2021-22555: Turning \x00\x00 into 10000$ by TheDong on Thursday July 15, 2021 @03:25PM (#27848965)
iiuc dirty cow did not require CAP_NET_ADMIN to be exploited, and this one does.

That's a massive difference since CAP_NET_ADMIN is somewhat rare (i.e. you can't get it from a random android app, but a random android app could have exploited dirty cow)

[ Parent | on HN ]