cts

No, personally I think CentOS 7 isn’t exploitable but I didn’t look suuuper hard. On Thu, Feb 11, 2021 at 03:13, insertos wrote: > did you find an exploit that...

This could indicate the overflow isn’t working, try commenting the mkdir and symlink code (eliminating the race) and see if any dirs are created. If not, it means your sudo...

> > > it doesn't work for me :( > > ``` > meme@charles-VirtualBox:/opt/CVE-2021-3156$ uname -a > Linux charles-VirtualBox 5.4.0-42-generic #46~18.04.1-Ubuntu SMP Fri Jul 10 07:21:24 UTC 2020 x86_64 x86_64...

This is still happening on ARM64 ``` Exception occurred: Error: maximum recursion depth exceeded in comparison () For more info invoke `set exception-verbose on` and rerun the command or debug...

Actually this binary is not qemu whatsoever. It is just a normal ELF compiled by clang. By the way, I forgot to say this but thank you @justfoxing for the...

Yes, it's running on a Raspberry Pi. ``` root@ubuntu:~# uname -a Linux ubuntu 5.4.0-1042-raspi #46-Ubuntu SMP PREEMPT Fri Jul 30 00:35:40 UTC 2021 aarch64 aarch64 aarch64 GNU/Linux root@ubuntu:~# lsb_release -a...

Ah, interesting it seems to be an issue specific to core files. ``` root@ubuntu:~# cat test2.c #include int main() { abort(); } root@ubuntu:~# clang -pthread -O3 test2.c root@ubuntu:~# ./a.out Aborted...

OK, will do. It seems to happen when I do `gdb a.out core` but indeed doesn't happen with the above command line

I'm just going to leave a comment here so other users can find this issue from Google from keywords, and hopefully help them. I also got this in GNU nano...

Workaround: https://github.com/stong/ConEmu/commit/5fae3a293c5b751a6098a2a48a928ca2de5a2cab Binaries https://github.com/stong/ConEmu/releases/tag/v21.09.05-workaround This work around simply disables autodetection of BrPaste mode. If an application requests BrPaste mode, its request is ignored.