Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2017-5123 PoC — Linux kernel 输入验证错误漏洞

Source
Associated Vulnerability
Title:Linux kernel 输入验证错误漏洞 (CVE-2017-5123)
Description:Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel中存在输入验证错误漏洞。本地攻击者可利用该漏洞获取root权限。
Description
Exploit for the linux kernel vulnerability CVE-2017-5123
Readme
# CVE-2017-5123
Exploit for the kernel vulnerability CVE-2017-5123

You can compile it with: `gcc -static -Wall -Wextra -Werror -o cve20175123 CVE-2017-5123.c`

If you want further explanation, I've wrote an article explaining how it's work, you can find it [here](http://pwn.beers4flags.fr/exploit/kernel-cve-2017-5123/)

This exploit is more reliable than the previous published by hexpresso, but it's still not perfect, he won't work on system with SMEP/SMAP and with kptr_restrict.
File Snapshot

[4.0K] /data/pocs/29e43ecea945202c5adafa4ea519f8f57e2fb726 ├── [4.5K] CVE-2017-5123.c └── [ 486] README.md 0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.