POC详情： d7eb35c1dda51348763743a7f163f9d9c75171a1

来源
https://github.com/ruycr4ft/CVE-2023-4911
关联漏洞
标题： glibc 缓冲区错误漏洞 (CVE-2023-4911)
描述：glibc（GNU C Library）是GNU计划所实现的C标准库。 glibc存在缓冲区错误漏洞，该漏洞源于动态加载程序ld.so存在缓冲区溢出漏洞。
描述
CVE-2023-4911
介绍
# CVE-2023-4911
This is a PoC (Proof Of Concept) for the Looney Tunables Linux Privilege Escalation vulnerability. This is based on [this PoC](https://github.com/leesh3288/CVE-2023-4911). Great thanks to `leesh3288`. [Here](https://seclists.org/oss-sec/2023/q4/18) you can find a very detailed writeup, and [here](https://youtu.be/1iV-CD9Apn8) you can see a very cool video by IppSec.

## Usage
Check if it's vulnerable
```bash
env -i "GLIBC_TUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=`printf '%08192x' 1`" /usr/bin/su --help
```
![](vuln.png)

It is worth saying that vulnerable `glibc` versions are, including this one, from `2.35-0ubuntu3.3` and below.

![](version.png)

Run the exploit
```bash
$ make
```
![](poc.png)
文件快照

 [4.0K]  /data/pocs/d7eb35c1dda51348763743a7f163f9d9c75171a1
├── [3.7K]  exp.c
├── [ 390]  gen_libc.py
├── [ 179]  Makefile
├── [ 37K]  poc.png
├── [ 735]  README.md
├── [ 18K]  version.png
└── [ 10K]  vuln.png

0 directories, 7 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。