Exploitation Summary
CVE-2015-3636 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 10 public exploits from researchers including fi01, android-rooting-tools, Miracle963.
AI-analyzed exploit summary This PoC exploits CVE-2015-3636, a local privilege escalation vulnerability in the Linux kernel. It manipulates kernel structures to gain root privileges by modifying task credentials and capabilities.
Description
The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect.
Exploits (10)
This PoC exploits CVE-2015-3636, a local privilege escalation vulnerability in the Linux kernel. It manipulates kernel structures to gain root privileges by modifying task credentials and capabilities.
This exploit targets CVE-2015-3636, a vulnerability in the Linux kernel's handling of ICMP sockets, leading to a local privilege escalation (LPE). The code creates a large number of ICMP sockets to trigger a use-after-free condition, allowing arbitrary kernel memory manipulation.
This repository contains a functional exploit for CVE-2015-3636, a Linux kernel vulnerability affecting Android devices. The exploit leverages socket manipulation and memory corruption to achieve local privilege escalation (LPE) by targeting kernel structures and bypassing address space layout randomization (ASLR).
The repository contains functional exploit code for CVE-2015-3636, a local privilege escalation vulnerability in the Linux kernel. The PoC manipulates task credentials to obtain root privileges by exploiting a race condition in the kernel's handling of socket structures.
This repository contains a privilege escalation exploit for CVE-2015-3636, targeting a vulnerability in the Linux kernel. The exploit manipulates kernel memory to escalate privileges to root by modifying task credentials and capabilities.
This PoC demonstrates a crash in the Linux kernel (CVE-2015-3636) by manipulating socket connections with invalid parameters, leading to a denial-of-service condition. The code creates a raw ICMP socket and attempts to connect it with an invalid address family, triggering the vulnerability.
This PoC exploits CVE-2015-3636, a local privilege escalation vulnerability in the Linux kernel's ping socket implementation. It manipulates kernel memory via a race condition to achieve arbitrary read/write, leading to privilege escalation.
This exploit targets CVE-2015-3636, a local privilege escalation vulnerability in the Linux kernel. It manipulates socket structures and memory management to achieve root access by exploiting a race condition in the kernel's handling of ICMP sockets.
The repository contains only a README.md file with the CVE identifier and no exploit code or technical details. It appears to be a placeholder or stub.
This repository contains a functional exploit for CVE-2015-3636, a Linux kernel vulnerability involving ICMP socket handling and memory corruption. The exploit manipulates kernel memory structures to achieve privilege escalation by leveraging race conditions and memory management flaws.