i mean yeah, patch your stuff. but fact is there are no exploits available, because it only works on modified installs, and none of the pocs actually work in the wild.
Actually yeah you’re right. I reread the post and their point was it wasn’t easily exploitable, not that it wasn’t exploitable. Which makes sense when LiveOverflow wasn’t able to bypass ASLR.
eh. https://eliastaylor.com/noexploit/
But the outcome of the exploit is bad enough to outweigh the difficulty. Even if it’s hard rce is something you don’t what to leave open.
i mean yeah, patch your stuff. but fact is there are no exploits available, because it only works on modified installs, and none of the pocs actually work in the wild.
LiveOverflow kinda debunked this
not really, no
Actually yeah you’re right. I reread the post and their point was it wasn’t easily exploitable, not that it wasn’t exploitable. Which makes sense when LiveOverflow wasn’t able to bypass ASLR.