Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2017-16995 PoC — Linux kernel 安全漏洞

Source
Associated Vulnerability
Title:Linux kernel 安全漏洞 (CVE-2017-16995)
Description:Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。 Linux kernel 4.14.8及之前的版本中的kernel/bpf/verifier.c文件的‘check_alu_op’函数存在安全漏洞。本地攻击者可利用该漏洞造成拒绝服务(内存损坏)。
Description
Writeup for CVE-2017-16995 Linux BPF Local Privilege Escalation
Readme
## CVE-2017-16995 Writeup

The folder containes a line-by-line source code analysis for CVE-2017-16995 (Linux BPF local privilege escalation).
Exploit and patch tested on kernel 4.4.0.116.


### Credits
- Special thanks to difeng_tang who has also contributed this writeup.
- Exploit scripts was created by @iBearcat at https://github.com/iBearcat/CVE-2017-16995/blob/master/exploit.c.
File Snapshot

[4.0K] /data/pocs/db8cb201774ed997a83cb505b352b7da7e7daf31 ├── [5.6K] exploit.c ├── [ 393] README.md └── [1.2M] writeup.pdf 0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.