Linux has been bitten by its most high-severity vulnerability in years

[Rui Carlos]

Citação

Linux has yet another high-severity vulnerability that makes it easy for untrusted users to execute code capable of carrying out a host of malicious actions, including installing backdoors, creating unauthorized user accounts, and modifying scripts or binaries used by privileged services or apps.

Dirty Pipe, as the vulnerability has been named, is among the most serious Linux threats to be disclosed since 2016, the year another high-severity and easy-to-exploit Linux flaw (named Dirty Cow) came to light as it was being used to hack a researcher's server. Researchers in 2016 demonstrated how to exploit Dirty Cow to root any Android phone, regardless of the mobile OS version. Eleven months later, researchers unearthed 1,200 Android apps in third-party markets that maliciously exploited the flaw to do just that.

[...]

Fonte: https://arstechnica.com/information-technology/2022/03/linux-has-been-bitten-by-its-most-high-severity-vulnerability-in-years/

 

Artigo do investigador que encontrou a vulnerabilidade, com mais detalhes: https://dirtypipe.cm4all.com

[M6]

O trabalho forense de investigação vale a pena ler. E como percebo o sentimento de frustração na procura de uma resposta sobre algo que parece que não faz qualquer sentido porque tudo aparenta estar bem...