Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-4014. PoCs published by Vitaly Nikolenko, vnik5287.
AI-analyzed exploit summary This exploit leverages CVE-2014-4014, a Linux kernel vulnerability in user namespace handling, to escalate privileges by manipulating file permissions via a cloned process with CLONE_NEWUSER. The PoC sets the setgid bit on a specified file.
Description
The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.
Exploits (2)
This exploit leverages CVE-2014-4014, a Linux kernel vulnerability in user namespace handling, to escalate privileges by manipulating file permissions via a cloned process with CLONE_NEWUSER. The PoC sets the setgid bit on a specified file.
This PoC exploits CVE-2014-4014, a Linux kernel local privilege escalation vulnerability via user namespace manipulation. It uses clone() with CLONE_NEWUSER to create a child process with altered UID mappings, allowing it to set the setgid bit on arbitrary files.