Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [use-after-free]

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code

0
votes
1answer
125 views

What famous attacks used a use-after-free vulnerability?

I'm compiling vulnerabilities and related attacks, and I need to find a famous attack that exploited a use-after-free vulnerability. I've looked for a while though I can't seem to find any. I know ...
-1
votes
0answers
233 views

Heap Spray on linux-3.18

I am trying to write POC for one use-after-free vulnerability. I have been able to control freed memory in 4.4 kernel but same code is not working on 3.18. As per my understanding, if allocated ...
0
votes
0answers
113 views

CVE-2016-0728 exploit

I've found this PoC and as many people said, it didn't work. I inserted printk into join_session_keyring and key_revoke, recompiled kernel, modified the number of loop and checked that refcount is ...
1
vote
0answers
146 views

Exploitability of Heap Vulnerabilities

I'm researching memory safety vulnerabilities and noticed that in non-browser applications (for example the Linux kernel) the CVE details entries for use-after-free vulnerabilities almost always list ...
-2
votes
2answers
2k views

How to find Use-After-Free vulnerabilities? [closed]

I followed a lot of tutorials about the exploitation of UAF vulnerabilities, but there was never explained how to find and detect UAF vulnerabilities in JavaScript or HTML (i.e. with a static analysis)...
4
votes
0answers
146 views

Lookaside List Injection

I've been reading a lot about Use-after-free and came across this document. It talks about a "Lookaside" injection exploit. The document says to empty the dynamic memory cache, called the Lookaside ...