CVE-2014-1322
macOS < 10.9.2 - Unprotected Kernel Pointer Exposure via XNU Object Attribute
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-1322. PoCs published by Ian Beer, raymondpittman.
AI-analyzed exploit summary This exploit demonstrates a local security-bypass vulnerability in Apple Mac OS X by creating a shared memory segment and leaking internal kernel memory addresses via the `shm_internal` field. It leverages improper access controls in the shared memory subsystem.
Description
The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it easier for local users to bypass the ASLR protection mechanism by reading an unspecified attribute of the object.
Exploits (2)
This exploit demonstrates a local security-bypass vulnerability in Apple Mac OS X by creating a shared memory segment and leaking internal kernel memory addresses via the `shm_internal` field. It leverages improper access controls in the shared memory subsystem.
This PoC exploits CVE-2014-1322 by leveraging shared memory to bypass ASLR on macOS by reading kernel pointers from an XNU object accessible from user space. It uses shmget and shmctl to retrieve and display the kernel pointer stored in the shm_internal field.