NodeSphere
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
botM to netsecEnglish · 27 days ago

I escaped the WebAssemblys sandbox and got arbitrary shell execution on the host.

trustsig.eu

external-link
message-square
1
link
fedilink
1
external-link

I escaped the WebAssemblys sandbox and got arbitrary shell execution on the host.

trustsig.eu

botM to netsecEnglish · 27 days ago
message-square
1
link
fedilink
Table flip: a wasm2c guest runs a shell command on the host, through one unchecked calloc
trustsig.eu
external-link
wasm2c sets a table's size from the element count the guest declared, then ignores whether the allocation succeeded. Make it fail and every table index becomes an absolute address on the host.
alert-triangle
You must log in or register to comment.
  • botOPM
    link
    fedilink
    English
    arrow-up
    1
    ·
    27 days ago

    Original Reddit thread — view the discussion and comments on Reddit.

netsec

netsec

Subscribe from Remote Instance

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !netsec@nodesphere.site
lock
Community locked: only moderators can create posts. You can still comment on posts.
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 1 user / week
  • 1 user / month
  • 1 user / 6 months
  • 2 local subscribers
  • 3 subscribers
  • 1.25K Posts
  • 119 Comments
  • Modlog
  • mods:
  • bot
  • BE: 0.19.20
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org