CVE-2017-16995

This is a Metasploit module for CVE-2017-16995, a Linux kernel BPF sign extension vulnerability allowing local privilege escalation. It compiles and executes an exploit to gain root privileges on vulnerable systems.

This is a working privilege escalation exploit for CVE-2017-16995, leveraging eBPF verifier bypass to gain root access on vulnerable Linux kernels. It manipulates kernel memory structures to escalate privileges from an unprivileged user.

This exploit leverages a BPF (Berkeley Packet Filter) vulnerability (CVE-2017-16995) in the Linux kernel to achieve local privilege escalation by manipulating kernel memory to overwrite the UID of the current process, granting root access.

This repository provides a detailed analysis and references for CVE-2017-16995, an eBPF-based local privilege escalation vulnerability in Linux kernels before 4.4.0-116. It includes links to technical writeups, PoC code, and exploit details but does not contain functional exploit code itself.

This repository provides a technical analysis and references for CVE-2017-16995, an eBPF-based local privilege escalation vulnerability in the Linux kernel. It includes links to external writeups and exploit code but does not contain functional exploit code itself.

This is a functional local privilege escalation exploit for CVE-2017-16995, targeting a vulnerability in the eBPF verifier in Linux kernels 4.4 to 4.14 on Ubuntu/Debian. It leverages a maliciously crafted BPF program to achieve arbitrary memory read/write, ultimately modifying the UID to gain root privileges.

This is a working exploit for CVE-2017-16995, a local privilege escalation vulnerability in the Linux kernel's BPF verifier. The exploit leverages an integer overflow to bypass verifier checks and achieve arbitrary read/write in kernel memory, ultimately escalating privileges to root.

This is a working local privilege escalation (LPE) exploit for CVE-2017-16995, targeting a vulnerability in the eBPF verifier in the Linux kernel. The exploit manipulates the eBPF verifier to achieve arbitrary memory read/write, ultimately modifying the UID to gain root privileges.

This is a working privilege escalation exploit for CVE-2017-16995, targeting a vulnerability in the Linux kernel's eBPF verifier. It leverages a stack overflow to overwrite kernel memory and escalate privileges to root.

This is a functional local privilege escalation exploit for CVE-2017-16995, targeting a vulnerability in the Linux kernel's BPF (Berkeley Packet Filter) implementation. The exploit manipulates kernel memory to escalate privileges to root by overwriting the UID of the current process.

This is a functional privilege escalation exploit for CVE-2017-16995, targeting a vulnerability in the Linux kernel's eBPF verifier. It manipulates kernel memory to escalate privileges to root by overwriting the UID of the current process.

This repository contains a functional exploit for CVE-2017-16995, a local privilege escalation vulnerability in the Linux kernel's eBPF verifier. The exploit leverages a crafted BPF program to achieve arbitrary memory read/write, ultimately escalating privileges to root.

This repository contains two functional privilege escalation exploits for CVE-2017-16995, targeting a vulnerability in the eBPF verifier in Linux kernels. Both exploits leverage eBPF to achieve arbitrary read/write in kernel memory, ultimately modifying the cred structure to gain root privileges.

This is a functional exploit for CVE-2017-16995, leveraging eBPF verifier bypass to achieve local privilege escalation on vulnerable Linux kernels. It manipulates kernel memory to escalate privileges to root by patching the cred structure.

This is a functional exploit for CVE-2017-16995, a Linux kernel vulnerability in the eBPF verifier. It bypasses security checks to achieve local privilege escalation by manipulating kernel memory structures.

This is a functional local privilege escalation (LPE) exploit for CVE-2017-16995, targeting a vulnerability in the eBPF verifier in Linux kernels 4.4 to 4.14 on Ubuntu/Debian. The exploit manipulates the eBPF verifier to achieve arbitrary memory read/write, ultimately modifying the UID of the current process to gain root privileges.

This repository contains a PoC for CVE-2017-16995, a local privilege escalation vulnerability in the Linux kernel's USB subsystem. The provided compile script builds three binaries likely used to exploit the double-free vulnerability.

This exploit leverages a sign extension vulnerability in the Linux kernel's BPF verifier (CVE-2017-16995) to achieve local privilege escalation. It manipulates BPF maps and socket filters to read/write arbitrary kernel memory, ultimately overwriting the current process's UID to gain root privileges.

This is a working privilege escalation exploit for CVE-2017-16995, targeting a vulnerability in the eBPF verifier in Linux kernels 4.4 to 4.14. The exploit manipulates the eBPF verifier to achieve arbitrary memory read/write, ultimately modifying the UID of the current process to gain root privileges.

This Metasploit module exploits CVE-2017-16995, a Linux kernel BPF verifier vulnerability allowing local privilege escalation via incorrect sign extension in the `check_alu_op` function. It bypasses the verifier to achieve arbitrary kernel read/write, tested on multiple Linux distributions.