Unveiling GLIBC heap overflow vulnerability (CVE-2023-6246)

José López Martínez - HEAP HEAP HOORAY: Unveiling GLIBC heap overflow vulnerability (CVE-2023-6246)
This presentation was held at #BSidesBUD2024 IT security conference on 23th May 2024.
In January, Qualys team found a heap overflow in one of the most used library in Linux, GLIBC. This issue allows attackers to escalate privileges by just changing the program name. However, it is not that easy or… is it? In this talk, we are going to be talking about heap overflows, how they work and how you can exploit CVE-2023-6246 to escalate privileges.
bsidesbud.com
All rights reserved.
#BSidesBUD2024 #heap #cve

[@dorime3031]

very nice conference, very informative.