关联漏洞
介绍
# Ubuntu Privilege Escalation: CVE-2023-2640 and CVE-2023-32629
This is a local privilege escalation vulnerability affecting certain Ubuntu kernels. It allows unprivileged users to set privileged extended attributes on mounted files, bypassing security checks and potentially gaining elevated privileges. Two CVEs, CVE-2023-2640 and CVE-2023-32629, are associated with this vulnerability. The affected kernels include versions 6.2.0, 5.19.0, and 5.4.0, across various Ubuntu releases. It's crucial to apply patches provided by Ubuntu promptly and follow security best practices to mitigate these vulnerabilities.
## Usage
1. Make the script executable:
```bash
chmod +x poc.sh
```
2. Run the script:
```bash
./poc.sh
```
## Demo
[](https://www.youtube.com/watch?v=Up5q-FLWNk4)
文件快照
[4.0K] /data/pocs/5f8ed7ec43d248a21008bb73d2b2c9fe01632db9
├── [ 313] poc.sh
└── [ 840] README.md
0 directories, 2 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问,请发送邮件到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
3. 神龙已为您对 POC 代码进行快照,为了长期维护,请考虑为本地 POC 付费/捐赠,感谢您的支持。