190 - Fuzzing cURL, Netatalk, and an Emulator Escape [Binary Exploitation Podcast]

This week we talk about more Rust pitfalls, and fuzzing cURL. Then we have a couple bugs, one involving messing with the TCP stack to reach the vulnerable condition.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/190.html

[00:00:00] Introduction
[00:00:27] Spot the Vuln - Insecure by Default
[00:02:20] cURL audit: How a joke led to significant findings
[00:09:45] Rustproofing Linux (Part 4/4 Shared Memory)
[00:11:25] Rustproofing Linux (Part 4/4 Shared Memory)
[00:17:22] Exploiting a remote heap overflow …

audit binary binary exploitation bugs curl default emulator escape exploitation exploiting findings fuzzing insecure introduction led linux memory netatalk podcast rust tcp vuln vulnerable