188 - Rusty Kernel Bugs, mast1c0re, and OpenSSH [Binary Exploitation Podcast]

Few discussions this week, from using ASAN for effectively, to vulnerabilities in Rust code, and some discussion about exploiting the OpenSSH double free.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/188.html

[00:00:00] Introduction
[00:00:31] Spot the Vuln - Too Soft
[00:04:19] One Weird Trick to Improve Bug Finding With ASAN
[00:08:27] Rustproofing Linux (Part 2/4 Race Conditions)
[00:22:39] OpenSSH Pre-Auth Double Free Writeup & PoC [CVE-2023-25136]
[00:34:14] mast1c0re: Part 2 - Arbitrary PS2 code execution
[00:42:39] All …

amp auth binary binary exploitation bug bugs code code execution conditions cve cve-2023-25136 discussions effectively exploitation exploiting free introduction kernel linux openssh poc podcast race conditions rust vuln vulnerabilities weird writeup