1 result · Feed
-
Unscored —
Private key leak via inherited file descriptor
# Private key leak via inherited file descriptor The X.509 key reading function `readKeyFile` opened a file descriptor to the private key without setting the *close-on-exec* flag. If a child process is `exec`ed at the same time, it would inherit that file des…