Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-4943. PoCs published by Emeric Nasi, redes-2015.
AI-analyzed exploit summary This PoC demonstrates a local privilege escalation vulnerability in the Linux kernel's PPPoL2TP feature by manipulating socket structures via setsockopt, leading to a kernel panic. It does not include full exploitation but highlights the potential for privilege escalation.
Description
The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.
Exploits (2)
This PoC demonstrates a local privilege escalation vulnerability in the Linux kernel's PPPoL2TP feature by manipulating socket structures via setsockopt, leading to a kernel panic. It does not include full exploitation but highlights the potential for privilege escalation.
This repository contains a proof-of-concept exploit for CVE-2014-4943, a local privilege escalation vulnerability in the Linux kernel's PPPoL2TP feature. The exploit leverages data-structure differences between an L2TP socket and an inet socket to trigger a kernel panic or potentially gain elevated privileges.