[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [VULN 1/4] Fake notifications



On 3/11/21 05:31, Sergey Bugaev wrote:
Short description
=================

libports accepts fake notification messages from any client on any port, which
can lead to port use-after-free, which can be exploited for local privilege
escalation to get full root access to the system.


This has been assigned CVE-2021-43412


Amos


Reply to: