Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

yabs geekbench_6 started with an executable stack. Should you worry ?

NJa64FNJa64F Barred
edited June 2025 in General

what do you think ?

So I quit running yabs on my servers due to this. However just got a new vps that I will be deleting the template and reinstalling so I gave yabs a run to see if this was still an issue ( for me ). and it is.

process 'root/2025-06-18T17_49_30+00_00/geekbench_6/geekbench_avx2' started with executable stack

further information: https://www.elastic.co/guide/en/security/8.18/process-started-with-executable-stack.html

The issue brought up on yabs github: https://github.com/masonr/yet-another-bench-script/issues/42

the summary from the devoloper masonr is:

Ultimately, it's up to the end user if they feel comfortable enough to run this code.
I may take a stab at adding an option for a tool such as sysbench to be used in place of geekbench, but for now it'll remain as is

I know yabs is extremely popular around here but am surprised that running a downloaded closed source binary as root which messes with the executable stack is not more discussed . And yes, on my github issue I mention that yabs could be run without the geekbench code.

edited - I wrongly thought it needed to be ran as root

Comments

  • LeviLevi Member

    I run yabs on cron. So…

  • NJa64FNJa64F Barred
    edited June 2025

    @Levi said:
    I run yabs on cron. So…

    1. cron has superpowers making this exploit void
    2. dont care
    3. its just an idler anyway

    need to update the original post stating geekbench isnt open source. so it is a closed source binary running as root modifying the executable stack

  • @jperkins said: what do you think ?

    You should not run it as root anyway..

  • NJa64FNJa64F Barred

    @emperor said:

    @jperkins said: what do you think ?

    You should not run it as root anyway..

    true. It had been awhile since I ran it and wrongly thought it needed root. I am still concerned with and would like to learn more about a binary modifying the executable stack

  • Nothing burger

Sign In or Register to comment.