CVE-2019-2215 PoC — Android 资源管理错误漏洞

Source

https://github.com/stevejubx/CVE-2019-2215

Associated Vulnerability

Title:Android 资源管理错误漏洞 (CVE-2019-2215)
Description:Android是美国谷歌（Google）和开放手持设备联盟（简称OHA）的一套以Linux为基础的开源操作系统。 Android中的binder.c文件存在资源管理错误漏洞。攻击者可利用该漏洞提升权限。

Description

Android Kernel Vulnerability (CVE-2019-2215) temporary root PoC

Readme

# CVE-2019-2215
Android Kernel Vulnerability (CVE-2019-2215) temporary root PoC.

It works on Google [Pixel 2](https://dl.google.com/dl/android/aosp/walleye-ota-qp1a.190711.020-d326cba7.zip)/[Pixel 2 XL](https://dl.google.com/dl/android/aosp/taimen-ota-qp1a.190711.020-4757f073.zip) (walleye/taimen) devices running the September 2019 QP1A.190711.020 image with kernel version-BuildID **`4.4.177-g83bee1dc48e8`**.

<p align=center>
  <img src="images/preview.png"/>
</p>

#### Usage
Now, Binary support arm64 only.


```console

$ git clone https://github.com/jsirichai/CVE-2019-2215.git
$ cd CVE-2019-2215
$ adb push bin/cve-2019-2215 /data/local/tmp
$ adb shell
$ chmod +x /data/local/tmp/cve-2019-2215
$ ./data/local/tmp/cve-2019-2215
```

## Credits
https://github.com/kangtastic/cve-2019-2215

File Snapshot


 [4.0K]  /data/pocs/05a824513aa4baa55678e73092b51288b3ef96e7
├── [4.0K]  bin
│   └── [ 24K]  cve-2019-2215
├── [ 28K]  cve-2019-2215.c
├── [4.0K]  images
│   └── [ 72K]  preview.png
├── [4.0K]  kernel
│   └── [4.0K]  x86_64
│       └── [ 15M]  bzImage
├── [ 974]  Makefile
└── [ 798]  README.md

4 directories, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!