Linux PERF_EVENTS root exploit - CVE-2013-2094 (quick way to fix it)
2013-05-16 01:54:00 Author: arighi.blogspot.com(查看原文) 阅读量:11 收藏

tag:blogger.com,1999:blog-4397409626710913610.post723715122967043284..comments2019-12-27T11:08:37.292+01:00Comments on arighi's blog: Linux PERF_EVENTS root exploit - CVE-2013-2094 (quick way to fix it)arighihttp://www.blogger.com/profile/15223521151492879497[email protected]Blogger5125tag:blogger.com,1999:blog-4397409626710913610.post-22584930296205071902017-10-15T05:05:36.446+02:002017-10-15T05:05:36.446+02:00you can see samsung galaxy note 8 GT-N5100 flash f... <br /><a href="http://viralgb.com/98/samsung-galaxy-flash-download" rel="nofollow"> you can see samsung galaxy note 8 GT-N5100 flash file stock rom download</a>Nahidhttps://www.blogger.com/profile/16411680153317733558[email protected]tag:blogger.com,1999:blog-4397409626710913610.post-55746392982070583622013-05-24T18:37:23.858+02:002013-05-24T18:37:23.858+02:00Great, I wish i have seen that earlier. in my situ...Great, I wish i have seen that earlier. in my situation i am stuck with a specific kernel so that would have worked the best. due to solution dependencies i can not upgrade the kernel and redhat mitigation workaround were fine, but that is much better. Walid Shaarihttps://www.blogger.com/profile/15275389583161808626[email protected]tag:blogger.com,1999:blog-4397409626710913610.post-15323629058756734692013-05-16T11:32:09.357+02:002013-05-16T11:32:09.357+02:00Yes, this is almost the same as the systemtap solu...Yes, this is almost the same as the systemtap solution. But in this way you don&#39;t need to install the whole systemtap stuff.arighihttps://www.blogger.com/profile/15223521151492879497[email protected]tag:blogger.com,1999:blog-4397409626710913610.post-44410695437398405922013-05-16T11:22:46.932+02:002013-05-16T11:22:46.932+02:00Thanks a lot! I was waiting for a kernel update fr...Thanks a lot! I was waiting for a kernel update from debian, but it hasn&#39;t been released yet. Smart and easy way to &quot;fix&quot; the bug (on redhat&#39;s bugzilla they were suggesting to use systemtap)Anonymous[email protected]tag:blogger.com,1999:blog-4397409626710913610.post-74856583149457358892013-05-15T22:57:21.243+02:002013-05-15T22:57:21.243+02:00BTW, I didn&#39;t mention it explicitly, but this ...BTW, I didn&#39;t mention it explicitly, but this can be also considered as a zero downtime update, since there&#39;s no need to reboot the kernel. Just insert the module and the fix is applied immediately at run-time.<br /><br />Obviously this is just a workaround, the solution is to update the kernel, but at least we can be safe against this attack and avoid to schedule a downtime as soon as possible.arighihttps://www.blogger.com/profile/15223521151492879497[email protected]

文章来源: http://arighi.blogspot.com/feeds/723715122967043284/comments/default
如有侵权请联系:admin#unsafe.sh