Glibc Dynamic Loader Hit by a Nasty Local Privilege Escalation Vulnerability

Re:Glibc Dynamic Loader Hit by a Nasty Local Privilege Escal... by CyberDildonics on Thursday October 05, 2023 @10:31AM (#37779094)

The link you have here is 'attacking' by directly changing the meta data in C with pointer offsets and doesn't mention musl anywhere.

[ Parent | on HN ]

Re:Glibc Dynamic Loader Hit by a Nasty Local Privilege Escal... by worthless-trash on Thursday October 05, 2023 @11:09AM (#37779600)

I did not say that it did. I'm saying that I believe the same kind of attacks work against the musl allocator, or at least I think they did at that time.

Musl was not being used by the business I worked in, therefore I had no interest in continuing investigation other than trying to get an understanding of how other implementations dealt with it.

I'm sorry for any confusion.

[ Parent | on HN ]

Re:Glibc Dynamic Loader Hit by a Nasty Local Privilege Escal... by CyberDildonics on Thursday October 05, 2023 @01:50PM (#37781685)

I believe the same kind of attacks work against the musl allocator

Why is this even an attack and why would musl have whatever weakness is claimed here?

[ Parent | on HN ]

Re:Glibc Dynamic Loader Hit by a Nasty Local Privilege Escal... by worthless-trash on Friday October 06, 2023 @08:28AM (#37789829)

Gotcha.

[ Parent | on HN ]