CVE-2016-5195 PoC — Linux kernel 竞争条件问题漏洞

Source

https://github.com/pgporada/ansible-role-cve

Associated Vulnerability

Title:Linux kernel 竞争条件问题漏洞 (CVE-2016-5195)
Description:Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 2.x至4.8.3之前的4.x版本中的mm/gup.c文件存在竞争条件问题漏洞，该漏洞源于程序没有正确处理copy-on-write(COW)功能写入只读内存映射。本地攻击者可利用该漏洞获取权限。

Description

Mitigates CVE-2016-5195 aka DirtyCOW

Readme

# Ansible Role: CVE
[![Ansible Galaxy](http://img.shields.io/badge/ansible--galaxy-cve-blue.svg)](https://galaxy.ansible.com/pgporada/cve/)
[![License](https://img.shields.io/badge/license-MIT-brightgreen.svg)](LICENSE)

This role mitigates/patches the defined CVEs.

- - - -

# Role Variables

Dirty COW vuln. http://dirtycow.ninja. Defaults to false. This mitigation will need to be run everytime the server it has been applied on restarts.

        cve_2016_5195: false

- - - -

# Example Playbook
```
---
- hosts: localhost
  connection: local
  become: true
  become_method: sudo

  vars:
    cve_2016_5195: true

  roles:
    - ../ansible-role-cve
```

- - - -

# How to hack away at this role
Before submitting a PR, please create a test and run it through test-kitchen.

```
git clone git@github.com:pgporada/ansible-role-cve.git
bundle install
bundle exec kitchen create
bundle exec kitchen converge
bundle exec kitchen verify
bundle exec kitchen destroy
```

- - - -

# Author Information

Phil Porada

- - - -

# License

MIT

(c) 2016 GreenLancer.com

File Snapshot


 [4.0K]  /data/pocs/99226c72edd53ae9278f708472a6001d63bc8c87
├── [2.2K]  bumpver.sh
├── [ 859]  CHANGES
├── [4.0K]  defaults
│   └── [  25]  main.yml
├── [4.0K]  files
│   └── [4.0K]  CVE-2016-5195
│       └── [ 275]  CVE-2016-5195.stap
├── [ 112]  Gemfile
├── [1.1K]  LICENSE
├── [4.0K]  meta
│   └── [ 352]  main.yml
├── [ 141]  playbook.yml
├── [1.0K]  README.md
├── [4.0K]  tasks
│   ├── [1.5K]  CVE-2016-5195.yml
│   └── [ 260]  main.yml
├── [4.0K]  test
│   └── [4.0K]  integration
│       └── [4.0K]  default
│           ├── [4.0K]  bats
│           │   └── [ 280]  99_idempotence.bats
│           └── [  92]  default.yml
└── [   6]  VERSION

9 directories, 14 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!