Re:Never run ldd on unknown executables
by throwawaaarrgh on Monday July 24, 2023 @09:37AM
(#36847789)
ASLR, PAC, etc are trivial to defeat for an experienced black hat / red team.
I'm not even talking about memory safety. That's just one class of exploits. There are so many more to choose from.
This vuln isn't that dangerous. It requires a special circumstance and trust. Other vulns don't require those things.
Yes, plenty of memory-unsafety vulnerabilities exist, but modern mitigations like stack cookies, ASLR, (and sometimes) sandboxing and PAC make it unlikely that e.g. a buffer overflow is exploitable without other factors such as an information leak from your machine back to the attacker. (This might be the case on publicly-accessible servers, but probably not on your laptop.)
The vulnerability being discussed here is unusually dangerous because it's more like command injection, and mitigations aren't going to help.