• info
• discussion
• exploit
• solution
• references

Plan 9 Local Integer Overflow Vulnerability

Plan 9 is prone to a local integer-overflow vulnerability because the operating system fails to check boundaries on input to operations that move sensitive memory at the kernel level.

Successfully exploiting this issue allows local attackers to corrupt the kernel memory of the Plan 9 operating system. This may potentially facilitate the execution of attacker-supplied machine code at the kernel level. Failed exploit attempts will likely crash the kernel.