Rootpipe Reborn (Part II)
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A guest post on Hrih News details CVE-2019-8565, a macOS privilege escalation bug in Apple's Feedback Assistant helper daemon. The helper validated XPC clients by process ID, which an attacker can race by reusing the PID of a trusted process, and it allowed arbitrary file copies that could be chained…