Coordinated Disclosure: 1-Click RCE on Gnome (CVE-2023-43641)

Re:Coordinated Disclosure: 1-Click RCE on Gnome (CVE-2023-43... by tannhaeuser on Wednesday October 11, 2023 @05:30AM (#37842487)

I've briefly examined the mentioned commit in response to the sandbox escape [1], and am way out of my comfort zone here, but I basically can't understand how setting seccomp policies can be effective in the presence of an exploitable buffer overflow (cf. max size check and mention of ASLR failure/compromise).

[1]: https://gitlab.gnome.org/GNOME/tracker-miners/-/commit/f0c88...

[ Parent | on HN ]

Re:Coordinated Disclosure: 1-Click RCE on Gnome (CVE-2023-43... by josephcsible on Wednesday October 11, 2023 @10:28PM (#37852839)

Buffer overflows can result in remote code execution, but it'll be within the same process, and there's no way to turn seccomp back off.

[ Parent | on HN ]