ctl_ctloutput-leak

ctlctloutput-leak La fonction ctlctloutput de macOS High Sierra 10.13 ignore la valeur de retour d'un appel à sooptcopyin, ce qui ouvre une fenêtre de course pour divulguer des données non initialisées du tas noyau vers l'espace utilisateur. ctlctloutput-leak est un exploit de proof-of-concept qu...

Apple macOS HighSierra 10.13 - ctl_ctloutput-leak Information Leak Exploit

Exploit for macOS platform in category local exploits / ctlctloutput-leak.c Brandon Azad CVE-2017-13868 While looking through the source code of XNU version 4570.1.46, I noticed that the function ctlctloutput in the file bsd/kern/kerncontrol.c does not check the return value of sooptcopyin, which...

Apple macOS High Sierra 10.13 - ctl_ctloutput-leak Information Leak

Apple macOS High Sierra 10.13 - ctlctloutput-leak Information Leak / ctlctloutput-leak.c Brandon Azad CVE-2017-13868 While looking through the source code of XNU version 4570.1.46, I noticed that the function ctlctloutput in the file bsd/kern/kerncontrol.c does not check the return value of...