CVE-2013-1763
Linux Kernel < 3.4.34 - Local Privilege Escalation via Netlink Message Family Value
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2013-1763. PoCs published by SynQ, Vitaly Nikolenko, Kacper Szczesniak.
AI-analyzed exploit summary This exploit leverages CVE-2013-1763, a SOCK_DIAG vulnerability in Linux kernels 3.3-3.8, to achieve local privilege escalation by manipulating netlink structures and executing arbitrary kernel code. It resolves kernel symbols dynamically or uses hardcoded addresses for Ubuntu/Fedora to bypass authentication.
Description
Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.
Exploits (5)
This exploit leverages CVE-2013-1763, a SOCK_DIAG vulnerability in Linux kernels 3.3-3.8, to achieve local privilege escalation by manipulating netlink structures and executing arbitrary kernel code. It resolves kernel symbols dynamically or uses hardcoded addresses for Ubuntu/Fedora to bypass authentication.
This exploit targets CVE-2013-1763, a Linux kernel vulnerability in the sock_diag module, to achieve local privilege escalation (LPE) by bypassing SMEP. It uses a crafted Netlink message to corrupt kernel memory and redirect execution to a user-controlled payload.
This exploit leverages a kernel vulnerability (CVE-2013-1763) in the Linux netlink socket implementation to achieve local privilege escalation. It uses a crafted netlink message to trigger a kernel memory corruption, overwriting a function pointer to execute arbitrary code in kernel context.
This exploit targets a Linux kernel vulnerability (CVE-2013-1763) to achieve local privilege escalation by manipulating kernel memory structures. It uses a socket operation to trigger the vulnerability and patches the current task structure to gain root privileges.
This exploit targets CVE-2013-1763, a Linux kernel vulnerability in the netlink socket implementation. It leverages a memory corruption flaw to achieve local privilege escalation by overwriting kernel memory and executing arbitrary code in kernel context.