Exploitation Summary
CVE-2015-1805 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 6 public exploits from researchers including dosomder, panyu6325, codecat007.
AI-analyzed exploit summary This repository contains a privilege escalation exploit for CVE-2015-1805, targeting a Linux kernel vulnerability in the flex_array implementation. The exploit manipulates kernel memory to achieve root access by modifying task credentials and SELinux contexts.
Description
The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."
Exploits (6)
This repository contains a privilege escalation exploit for CVE-2015-1805, targeting a Linux kernel vulnerability in the flex_array implementation. The exploit manipulates kernel memory to achieve root access by modifying task credentials and SELinux contexts.
This PoC exploits a race condition in the Linux kernel's pipe handling (CVE-2015-1805) to achieve local privilege escalation. It uses multithreading to trigger a use-after-free vulnerability, allowing arbitrary memory manipulation.
This PoC exploits a race condition in the Linux kernel's readv system call (CVE-2015-1805) by unmapping and remapping memory while readv is executing, leading to potential privilege escalation. The code uses threads to trigger the race condition between memory operations and I/O operations.
This repository contains a Python script that builds an APK exploiting CVE-2015-1805 for privilege escalation on Android devices. It uses ngrok for tunneling and generates a malicious payload for remote access.
This repository contains a proof-of-concept exploit for CVE-2015-1805, a Linux kernel vulnerability involving a race condition in the pipe system call. The exploit leverages thread-based race conditions to achieve privilege escalation by manipulating memory mappings and pipe operations.
This repository contains a functional privilege escalation exploit for CVE-2015-1805, targeting Linux kernels via a vulnerability in the I/O vector (iovec) handling. The exploit modifies kernel memory to escalate privileges to root by manipulating task credentials and syscall tables.