Drew DeVault's blog
·
MSG_PEEK is pretty common, CVE-2016-10229 is worse than you think
💡
原文英文，约100词，阅读约需1分钟。
📝
内容提要
I heard about CVE-2016-10229 earlier today. In a nutshell, it allows for arbitrary code execution via UDP traffic if userspace programs are using MSG_PEEK in their recv calls. I quickly updated my...
🏷️
标签
➡️
