4 ms·
Can anyone explain what access is necessary to use this attack? I'm guessing anyone with shell access (can run arbitrary shell commands from an unprivileged ac
by csense 14y ago
Can anyone explain what access is necessary to use this attack?
I'm guessing anyone with shell access (can run arbitrary shell commands from an unprivileged account) will be able to use this to get root. But that's just a guess; kernel experts are welcome to weigh in.
- astrodust 14y agoAny application that has a vulnerability can run arbitrary code, such as an insufficiently patched WordPress, could enable privilege escalation using this flaw.
- sounds 14y agoThat's a bit of an exaggeration, because this requires a precise race condition. The race condition is very possible but fairly unlikely unless you apply the Proof-of-Concept patch to make a huge gaping delay in the kernel where the exploit can run. WordPress probably has unpatched vulnerabilities, but it would take many thousands of attempts to exploit this hole.
- StavrosK 14y agoDoesn't that take around a second?
- thefreeman 14y agoThere isn't even a working exploit yet. As someone else mentioned, they include a kernel patch with their proof of concept to allow you to reproduce it.