Vulnerability Discovered in Open-Source Online Code Execution System

The recent discovery of a vulnerability in the popular open-source online code execution system, Judge0, has sent shockwaves through the cybersecurity community. The issue lies in the way the system handles symbolic links (symlinks) within its sandbox directory.

When bd_link_disk_holder() is called, the driver may suspend submitting io operations to protect the creation of symlinks between holding disks and slave block devices. However, this introduces potential issues and vulnerabilities. In the Linux kernel, a deadlock has been resolved by using 'open_mutex' of gendisk to protect open/close block devices.

An attacker can exploit this vulnerability by creating a symbolic link at the path 'run_script' before the code is executed. This allows them to overwrite scripts on the system and gain code execution outside of the sandbox. The security issue arises when Judge0 writes a 'run_script' to the sandbox directory without accounting for symlinks placed inside.

The implications of this vulnerability are significant, as it can be used to bypass the patch for CVE-2024-28185 and achieve a complete sandbox escape. An attacker could create a symbolic link to a file outside the sandbox, allowing them to run chown on arbitrary files outside the sandbox.

Judge0 is an open-source online code execution system designed to provide a secure environment for executing user-submitted code. However, this vulnerability highlights the importance of thorough testing and validation in software development.

In conclusion, the recent discovery of this vulnerability serves as a reminder of the need for ongoing vigilance and scrutiny in the cybersecurity landscape. It is essential to stay informed about emerging threats and take proactive measures to protect against them.

Mycloud pr4100 nzbget ssh