3 ms·
No RCE on Ubuntu: Ubuntu packages are built with stack protector, reducing the impact of this CVE from remote code execution to a denial of service
by gnfargbl 4y ago
No RCE on Ubuntu:
Ubuntu packages are built with stack protector, reducing the
impact of this CVE from remote code execution to a denial of
service.
-- https://ubuntu.com/security/CVE-2022-3602 https://ubuntu.com/security/CVE-2022-3602
- mkeedlinger 4y agoAnywhere I can learn more about what stack protection they have?
- slt2021 4y agohttps://lwn.net/Articles/584225/ https://lwn.net/Articles/584225/
- mkeedlinger 4y agoVery interesting, thank you
- 0xbadcafebee 4y agohttps://wiki.ubuntu.com/Security/Features https://wiki.ubuntu.com/Security/Features - particularly the stack protector, heap protector, ASLR, PIE, stack clash protection, NX bit, kernel stack protector, kernel ASLR.
- deleted 4y ago[deleted]
- AtNightWeCode 4y agoThat is a very clever feature. Cheap insurance.