244 - Linux Burns Down CVEs [Binary Exploitation Podcast]

Linux becomes a CNA and takes a stance on managing CVEs for themselves, and underutilized fuzzing strategies are discussed.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/244.html

[00:00:00] Introduction
[00:00:14] The kernel becomes its own CNA
[00:26:50] Bug - Double free on `dcm_dataset_insert` · Issue #82 · ImagingDataCommons/libdicom
[00:31:48] Buffer Overflow Vulnerabilities in KiTTY Start Duplicated Session Hostname (CVE-2024-25003) & Username (CVE-2024-25004) Variables
[00:38:35] Underutilized Fuzzing Strategies for Modern Software Testing

The DAY[0] Podcast episodes are streamed …

binary binary exploitation buffer buffer overflow buffer overflow vulnerabilities bug cve cves down exploitation free fuzzing introduction issue kernel kitty linux overflow own podcast session start strategies vulnerabilities