Glibc Dynamic Loader Hit by a Nasty Local Privilege Escalation Vulnerability

Re:Glibc Dynamic Loader Hit by a Nasty Local Privilege Escal... by worthless-trash on Thursday October 05, 2023 @03:28AM (#37775768)

Not in a HN news comment, I don't have that level of dedication to this because its definitely non trivial. However you can read about them in use against the glibc allocator are here: https://github.com/DhavalKapil/heap-exploitation/blob/master...

The "house of" attack method are attacks against the allocator, its been a while since I've looked into it, I hope musl have hardened their allocator against this kind of attacks.

[ Parent | on HN ]

Re:Glibc Dynamic Loader Hit by a Nasty Local Privilege Escal... by CyberDildonics on Thursday October 05, 2023 @10:31AM (#37779094)

The link you have here is 'attacking' by directly changing the meta data in C with pointer offsets and doesn't mention musl anywhere.

[ Parent | on HN ]

Re:Glibc Dynamic Loader Hit by a Nasty Local Privilege Escal... by worthless-trash on Thursday October 05, 2023 @11:09AM (#37779600)

I did not say that it did. I'm saying that I believe the same kind of attacks work against the musl allocator, or at least I think they did at that time.

Musl was not being used by the business I worked in, therefore I had no interest in continuing investigation other than trying to get an understanding of how other implementations dealt with it.

I'm sorry for any confusion.

[ Parent | on HN ]

Re:Glibc Dynamic Loader Hit by a Nasty Local Privilege Escal... by CyberDildonics on Thursday October 05, 2023 @01:50PM (#37781685)

I believe the same kind of attacks work against the musl allocator

Why is this even an attack and why would musl have whatever weakness is claimed here?

[ Parent | on HN ]

Re:Glibc Dynamic Loader Hit by a Nasty Local Privilege Escal... by worthless-trash on Friday October 06, 2023 @08:28AM (#37789829)

Gotcha.

[ Parent | on HN ]