CVE-2013-6799
Apple Mac OS X 10.9 - Denial of Service via Hard Link to Directory
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-6799. PoCs published by Maksymilian Arciemowicz.
AI-analyzed exploit summary This exploit demonstrates a vulnerability in MacOSX/XNU HFS+ file system (CVE-2013-6799) where hard links to directories can be created, leading to kernel crashes or denial-of-service conditions when combined with commands like 'ls' or 'find'. The code includes a proof-of-concept to create a large number of hard links and trigger the crash.
Description
Apple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic) by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105.
Exploits (1)
This exploit demonstrates a vulnerability in MacOSX/XNU HFS+ file system (CVE-2013-6799) where hard links to directories can be created, leading to kernel crashes or denial-of-service conditions when combined with commands like 'ls' or 'find'. The code includes a proof-of-concept to create a large number of hard links and trigger the crash.