Hacker News
Favorites
Setup
☰
Home
Favorites
Setup
Comment by pornel |
original
|
Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel
[−]
pornel
· 2026-08-30 Sun 12:09 UTC ·
link
fave
The bug here is not related to virtualization, but a footgun as old as C stdlib: system() that doesn't take arguments separately, and instead relies on shell escaping by the application.
[−]
1718627440
· 2026-08-30 Sun 13:54 UTC ·
link
fave
The only point of system(3) is to invoke the OS shell, if you do not want that use exec(3).