[gentoo-user] Local root exploit (not?) working...

[gentoo-user] Local root exploit (not?) working...

[Jarry]

Hi Gentoo-users,

have you noticed the latest local priviledge escalation exploit?
http://packetstormsecurity.com/files/121616/semtex.c

Actually, it does not (?) work on my box even with PERF_EVENTS,
but when I compile & run it (as non-root user), my system is
instantly restarted. So it seems that gentoo-sources 3.7.10-r1
are at least partially affected. I hope to see fix soon!

Jarry
-- 
_______________________________________________________________
This mailbox accepts e-mails only from selected mailing-lists!
Everything else is considered to be spam and therefore deleted.

Re: [gentoo-user] Local root exploit (not?) working...

[victor romanchuk]

On 05/15/2013 08:35 PM, Jarry wrote:
>
> Actually, it does not (?) work on my box even with PERF_EVENTS,
> but when I compile & run it (as non-root user), my system is
> instantly restarted. So it seems that gentoo-sources 3.7.10-r1
> are at least partially affected. I hope to see fix soon!
>

this is already reflected in the portage: gentoo-sources-3.7* removed
from the tree with an advice to upgrade to 3.8.13 --
https://bugs.gentoo.org/show_bug.cgi?id=469854

victor