oss-sec mailing list archives

Re: Linux kernel < 4.8 local generic ASLR - another CVE-ID

From: Vladis Dronov <vdronov () redhat com>
Date: Thu, 18 Apr 2019 09:40:54 -0400 (EDT)

Just in another case - this flaw in a.out binaries has got the CVE-2019-11191:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11191

Best regards,
Vladis Dronov | Red Hat, Inc. | Product Security | Senior Software Engineer

Current thread:

Linux kernel < 4.8 local generic ASLR bypass for setuid binaries Federico Manuel Bento (Apr 03)
- Re: Linux kernel < 4.8 local generic ASLR - CVE-ID Vladis Dronov (Apr 15)
  - Re: Linux kernel < 4.8 local generic ASLR - another CVE-ID Vladis Dronov (Apr 18)
    - Re: Linux kernel < 4.8 local generic ASLR - another CVE-ID Solar Designer (May 22)