A 39C3 (Chaos Communication Congress) conference presentation showcased the results of a study on the security of the FreeBSD jail mechanism. The researchers managed to escape the Jail and compromise the host, provided that the attacker has root privileges within the Jail. Code for five exploit prototypes has been published on GitHub, using vulnerabilities in ipfilter, dummynet, carp, and ipfw to break out of the Jail, which manifest in FreeBSD 14.3-RELEASE. Throughout the research, approximately 50 security issues were identified in the FreeBSD kernel, for which patches with fixes have been prepared.
Key findings at the end of the report:
- Modern operating systems are extremely complex, and the emergence of errors in them is inevitable.
- Most of the analyzed code was written in the 1990s and has not been audited for a long time.
- Most of the identified vulnerabilities are related to low-level memory handling errors that could have been avoided by using modern languages like Rust.
Forrás: opennet.ru
