Headline
CVE-2023-46277: start new process in a new PTY (!69) · Merge requests · ed neville / please · GitLab
please (aka pleaser) through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. (If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited.)
Skip to content
GitLab
- Why GitLab
- Pricing
- Contact Sales
- Explore
Why GitLab
Pricing
Contact Sales
Explore
Sign in
Get free trial
ed neville
please
Merge requests
!69
start new process in a new PTY
- Review changes
Download
Patches
Plain diff
Alexander Kjäll requested to merge alexanderkjall/please:fix-issue-13 into master Oct 07, 2023
- Overview 18
- Commits 2
- Pipelines 2
- Changes 3
in order to fix the security problem described in #13 start the new command in a new PTY and inherit STDIN/STDOUT/STDERR from the original one
Merge request reports
Related news
please (aka pleaser) through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. (If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited.)