CVE-2013-6282 PoC — Linux kernel 输入验证漏洞

Source

https://github.com/fi01/libput_user_exploit

Associated Vulnerability

Title: Linux kernel 输入验证漏洞 (CVE-2013-6282)
Description:The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.

Description

CVE-2013-6282 exploit

Readme

#

ATTENTION !!!
	This exploit writes more 3 bytes with zero.

	But it is enough to install ptmx.fsync handler and modify uevent_helper string.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →