Exploitation Summary
CVE-2009-2698 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including spender, Andi, INetCop Security.
AI-analyzed exploit summary This exploit targets CVE-2009-2698, a vulnerability in the Linux kernel's udp_sendmsg() function, allowing local privilege escalation. The code references a proof-of-concept (PoC) for x86/x64 architectures, with additional resources provided for compilation and execution.
Description
The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
Exploits (4)
This exploit targets CVE-2009-2698, a vulnerability in the Linux kernel's udp_sendmsg() function, allowing local privilege escalation. The code references a proof-of-concept (PoC) for x86/x64 architectures, with additional resources provided for compilation and execution.
This exploit leverages a vulnerability in the Linux kernel (< 2.6.19) where the `udp_sendmsg` function can be manipulated via a callback function in `dst_entry`/`rtable` to escalate privileges to root. It uses inline assembly to set UID/GID values to zero, achieving local privilege escalation.
This exploit targets a vulnerability in the Linux kernel (CVE-2009-2698) by manipulating the `ip_append_data()` function to achieve local privilege escalation to root. It uses a combination of memory manipulation and socket operations to trigger the vulnerability and execute arbitrary kernel code.
This repository contains a functional exploit for CVE-2009-2698, a local privilege escalation vulnerability in the Linux kernel. The exploit code (36108.c) is compiled and executed on CentOS 4.8, successfully escalating privileges from a regular user to root.
References (26)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H