CVE-2016-3955 PoC — Linux kernel 拒绝服务漏洞

Source

Associated Vulnerability

Title: Linux kernel 拒绝服务漏洞 (CVE-2016-3955)
Description:The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.

Description

A demo server for CVE-2016-3955 (UBOAT)

Readme

# uboatdemo
### A demo server for CVE-2016-3955 (UBOAT)
Performs Linux heap buffer overflow, when USB/IP client begins sending control URBs.

## Building
The server is a standard simple Go program. You can build it the usual way assuming you have Go setup and configured according to [official instructions](https://golang.org/doc/install) with:
```
go get github.com/pqsec/uboatdemo/cmd/uboatsrv
```
The compiled binary should be in the `bin` directory of your configured `$GOPATH`.

## Additional information
https://pqsec.org/uboat-CVE-2016-3955/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →