PS4 Developer CTurt on Analysis of FreeBSD Kernel Exploits

Earlier this month PlayStation 4 developer CTurt reported news of a new FreeBSD Kernel Exploit, and today he's updated Github with an analysis of both the FreeBSD SETFKEY kernel vulnerability (CVE-2016-1886) and the kernel heap overflow (CVE-2016-1887) for PS4 developers and hackers alike.


Check out his full analysis at the articles linked below:

• Analysis of CVE-2016-1886
• Analysis of CVE-2016-1887

 

[Howie648]

I'd hit the like button again if I could. This is great news !

 

[Fimo]

Does it have a link to the PS4 ?
* CVE-2016-1886: Does the FreeBSD for the PS4 include a keyboard driver ?
* CVE-2016-1887: "A kernel heap overflow was introduced to FreeBSD in release 10.0" but the PS4 uses FreeBSD 9

 

[B7U3 C50SS]

Does it have a link to the PS4 ?
* CVE-2016-1886: Does the FreeBSD for the PS4 include a keyboard driver ?
* CVE-2016-1887: "A kernel heap overflow was introduced to FreeBSD in release 10.0" but the PS4 uses FreeBSD 9

Yes! the PS4 is able to handle a keyboard. that is the answer. np bro!

 

[mcmrc1]

hope this will work also on newer fw but entry point is needed or not?

 

[Howie648]

So it's cool to update to 3.50 now I take it?

 

[CnCore]

On what Firmware are you right now Howie ?

 

[Howie648]

3.15 and I want to access my paid PSN content.