LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   A vulnerability in the way (https://www.linuxquestions.org/questions/linux-newbie-8/a-vulnerability-in-the-way-4175615466/)

ravipradeep 10-11-2017 11:18 AM

A vulnerability in the way
 
A vulnerability in the way the Linux kernel loads ELF files could lead to memory corruption and local privilege elevation. The flaw dates back to 2015, but was only recently classified as a vulnerability.

Read more in:
- [link to the register magazine removed] Patch alert! Easy-to-exploit flaw in Linux kernel rated 'high risk'
- [link to the bleeping computer magazine removed] Linux Kernel Bug Reclassified as Security Issue After Two Years

rtmistler 10-11-2017 11:27 AM

Neither of those links leads to the topics you're citing. However they seem to be technical magazines.

Please update correctly.

TB0ne 10-11-2017 11:45 AM

Quote:

Originally Posted by ravipradeep (Post 5768821)
A vulnerability in the way the Linux kernel loads ELF files could lead to memory corruption and local privilege elevation. The flaw dates back to 2015, but was only recently classified as a vulnerability.

Read more in:
- [link to the register magazine removed] Patch alert! Easy-to-exploit flaw in Linux kernel rated 'high risk'
- [link to the bleeping computer magazine removed] Linux Kernel Bug Reclassified as Security Issue After Two Years

And both articles (found via Google search), indicate it was fixed in kernel 4.0, and some long-term distros (Red Hat, CentOS, Debian), have already released patches for the 3.x kernel issue.

So is there a particular point in posting these links, ravipradeep?

dugan 10-11-2017 11:49 AM

The entire post top post was lifted from here:

https://www.sans.org/newsletters/newsbites/xix/77#300

TB0ne 10-11-2017 11:59 AM

Quote:

Originally Posted by dugan (Post 5768835)
The entire post top post was lifted from here:
https://www.sans.org/newsletters/newsbites/xix/77#300

Nice...good catch! Wonder who the next winner is going to be on "Spot the spammer!"? :)

sundialsvcs 10-11-2017 12:16 PM

Carnegie-Mellon University hosts an official site that is specifically concerned with computer vulnerabilities:

http://cert.org

This (among others) is an authoritative reference to public software vulnerabilities and their patch status.

rtmistler 10-11-2017 12:23 PM

Closed as spam or at least copycat post.


All times are GMT -5. The time now is 11:37 AM.