4 ms·
The website is tongue-in-cheek but the exploit patch is documented here: "Debian Security Advisory DSA-4163-1 beep -- security update" https://www.debian.org/
by seanwilson 9y ago
The website is tongue-in-cheek but the exploit patch is documented here:
"Debian Security Advisory DSA-4163-1 beep -- security update"
https://www.debian.org/security/2018/dsa-4163 https://www.debian.org/security/2018/dsa-4163
- 333c 9y agoAh, cool. Thanks for the link! I was confused by the original post.
- avian 9y agoApart from confirming the vulnerability, that page doesn't really give any technical info. Does anyone have any details on the problem? It's such a simple program that I'm fascinated by the fact that it has a security vulnerability. I was looking at the patch that Debian shipped and it seems to me that there was some kind of a race condition when opening the console device multiple times, but I can't figure out the exact source of the problem.
- jwilk 9y agohttps://news.ycombinator.com/item?id=16753013 https://news.ycombinator.com/item?id=16753013 has more discussion, but so far nobody has figured out what exactly is going on.