CVE-2016-5195 PoC — Linux kernel 竞争条件问题漏洞

Source

Associated Vulnerability

Title:Linux kernel 竞争条件问题漏洞 (CVE-2016-5195)
Description:Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 2.x至4.8.3之前的4.x版本中的mm/gup.c文件存在竞争条件问题漏洞，该漏洞源于程序没有正确处理copy-on-write(COW)功能写入只读内存映射。本地攻击者可利用该漏洞获取权限。

Description

编译好的脏牛漏洞（CVE-2016-5195）EXP

Readme

# DirtyCow-EXP
编译好的脏牛漏洞（CVE-2016-5195）EXP，分为 Linux 平台 和 Android 平台。

漏洞详细复现过程请参考：  https://brucetg.github.io/2018/05/27/DirtyCow%EF%BC%88%E8%84%8F%E7%89%9B%EF%BC%89%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/

File Snapshot


 [4.0K]  /data/pocs/777bafb6395518f4f4452e242a6e00bf82f7442b
├── [4.0K]  Android
│   ├── [4.0K]  Android-4.4-libs
│   │   ├── [4.0K]  arm64-v8a
│   │   │   └── [9.9K]  dirtycow
│   │   ├── [4.0K]  armeabi
│   │   │   └── [ 13K]  dirtycow
│   │   ├── [4.0K]  armeabi-v7a
│   │   │   └── [ 13K]  dirtycow
│   │   ├── [4.0K]  mips
│   │   │   └── [5.6K]  dirtycow
│   │   ├── [4.0K]  mips64
│   │   │   └── [ 10K]  dirtycow
│   │   ├── [4.0K]  x86
│   │   │   └── [5.4K]  dirtycow
│   │   └── [4.0K]  x86_64
│   │       └── [6.0K]  dirtycow
│   └── [4.0K]  Android-6.0.1-libs
│       ├── [4.0K]  arm64-v8a
│       │   └── [9.9K]  dirtycow
│       ├── [4.0K]  armeabi
│       │   └── [ 13K]  dirtycow
│       ├── [4.0K]  armeabi-v7a
│       │   └── [ 13K]  dirtycow
│       ├── [4.0K]  mips
│       │   └── [5.7K]  dirtycow
│       ├── [4.0K]  mips64
│       │   └── [ 10K]  dirtycow
│       ├── [4.0K]  x86
│       │   └── [5.4K]  dirtycow
│       └── [4.0K]  x86_64
│           └── [6.0K]  dirtycow
├── [4.0K]  Linux
│   ├── [ 13K]  dirtycow
│   └── [ 18K]  dirtycow文件信息.jpg
└── [ 264]  README.md

18 directories, 17 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!