3 ms·

Honest question, what are the real world impacts of these kind of vulnerabilities? If I am running a few on-premises private servers where I control all the sof

• NullPrefix 3y ago
  >I control all the software A bold statement to make. Even if it would be true, do you control all the inputs for that software or can other people feed it with data?
• x-complexity 3y ago
  If you can lock down ALL the software used & disable remote access, you'll likely never encounter this vulnerability. It requires local unprivileged access in order to be used, so if you can restrict that to a few allowed processes, you'll be 90% fine.
• viraptor 3y ago
  Do you execute any untrusted code submitted by the users? It not, then it's very likely not an issue for you.* This mostly allows escaping from a sandbox or getting elevated privileges on a host. But in those cases you're already hacked and the attacker has access to your data, so getting root on some server likely isn't a bigger deal than the initial hack. * there's a chance that this enables a remote exploit through some specially crafted data for some popular library... the chances are very slim though