lurklurk , 4 days ago the in depth technical details TL;DR; sigalarm handler calls syslog which isn't safe to call from a signal handler context. Their example exploit needed about 10k attempts to get a remote shell so it's not fast or quiet, but a neat find regardless
the in depth technical details
TL;DR; sigalarm handler calls syslog which isn't safe to call from a signal handler context.
Their example exploit needed about 10k attempts to get a remote shell so it's not fast or quiet, but a neat find regardless