3 ms·
Are there any write ups for this yet? I can't find a CVE or anything on this one. No word from OpenSSL yet either.
by eyeareque 12y ago
Are there any write ups for this yet? I can't find a CVE or anything on this one. No word from OpenSSL yet either.
- Moral_ 12y agoThis shouldn't be exploitable on modern linux machines due to https://wiki.debian.org/mmap_min_addr https://wiki.debian.org/mmap_min_addr Who knows for embedded devices.
- lawnchair_larry 12y agoIt wouldn't be exploitable even without that, due to it being a userland dereference. The mmap 0 trick really only applies to kernel exploits. If you're in a position to mmap anything, you can already execute code.