Re: privilege escalation via vmmints?

On Mon, Jun 03, 2019 at 10:55:47AM +0200, Mara Toni wrote:
> Hello,
>
> did anybody hear about the:
>
> https://vigilance.fr/vulnerability/OpenBSD-privilege-escalation-via-vmmints-28874
>
> OpenBSD: privilege escalation via vmmints
> Synthesis of the vulnerability
> An attacker can bypass restrictions via vmmints of OpenBSD, in order to escalate his privileges.
> Vulnerable systems: OpenBSD.
> Severity of this threat: 2/4.
> Consequences of a hack: administrator access/rights, privileged access/rights.
> Pirate's origin: user shell.
> Creation date: 27/03/2019.
> Références of this weakness: VIGILANCE-VUL-28874.
>
> any info on it?
>
> Thanks.
>

https://ftp.openbsd.org/pub/OpenBSD/patches/6.4/common/016_vmmints.patch.sig

-ml