CVE-2017-5123
HIGHLinux Kernel 4.13 through 4.13.7 - Sandbox Escape via waitid
Title source: llmExploitation Summary
EIP tracks 13 public exploits for CVE-2017-5123. PoCs published by Chris Salls, @XeR_0x2A & @chaign_c, qazbnm456.
AI-analyzed exploit summary This exploit leverages CVE-2017-5123, a waitid bug in Linux Kernel 4.13, to bypass seccomp, chroot, and uid namespace restrictions, achieving root privileges. It involves kernel memory corruption, SMAP/SMEP bypass, and arbitrary read/write via physmap manipulation.
Description
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
Exploits (13)
This exploit leverages CVE-2017-5123, a waitid bug in Linux Kernel 4.13, to bypass seccomp, chroot, and uid namespace restrictions, achieving root privileges. It involves kernel memory corruption, SMAP/SMEP bypass, and arbitrary read/write via physmap manipulation.
This exploit leverages CVE-2027-5123, a Linux kernel vulnerability, to achieve local privilege escalation by manipulating memory mappings and kernel function pointers. It uses shellcode to overwrite kernel structures and gain root access.
This repository provides a detailed writeup and references for CVE-2017-5123, a Linux kernel vulnerability in the waitid() function that allows container escape. It includes links to external PoCs and technical analyses but does not contain direct exploit code.
This repository contains a proof-of-concept exploit for CVE-2017-5123, a local privilege escalation vulnerability in the Linux kernel's waitid system call. The exploit bypasses SMEP/SMAP protections by leveraging an unrestricted write operation to kernel memory.
This repository provides a detailed writeup and references for CVE-2017-5123, a Linux kernel vulnerability in the waitid() function that allows local privilege escalation. It includes links to external PoCs and technical analyses but does not contain exploit code itself.
This is a local privilege escalation exploit for CVE-2017-5123, targeting a kernel vulnerability in Linux. It leverages a race condition in the waitid system call to overwrite kernel memory and execute a shellcode payload to gain root privileges.
This repository contains a working privilege escalation exploit for CVE-2017-5123, targeting a Linux kernel vulnerability. The exploit uses memory probing and heap spraying to achieve root privileges, though it may leave the system unstable.
This repository contains a functional privilege escalation exploit for CVE-2017-5123, leveraging a null pointer dereference in the `waitid` syscall to achieve arbitrary kernel memory write and escalate privileges. The exploit includes a detailed technical explanation, compilation instructions, and a working PoC in C.
This repository contains a proof-of-concept exploit for CVE-2017-5123, a Linux kernel privilege escalation vulnerability in the `waitid` syscall. The exploit leverages an arbitrary write primitive to overwrite kernel memory, specifically targeting the `have_canfork_callback` variable to achieve privilege escalation.
This repository contains a proof-of-concept exploit for CVE-2017-5123, a Linux kernel vulnerability allowing local privilege escalation, along with a kernel rootkit implementing an ICMP-based command-and-control channel and a vulnerable web application demonstrating OS command injection.
The repository contains functional exploit code for CVE-2017-5123, a Linux kernel vulnerability in the waitid system call that allows local privilege escalation due to missing address validation. The PoC includes both a full exploit and a minimal version demonstrating the KASLR bypass and memory corruption techniques.
This repository contains a working proof-of-concept exploit for CVE-2017-5123, a Linux kernel vulnerability in the waitid system call that allows local privilege escalation by writing to kernel memory due to missing access_ok() checks.
This is a working privilege escalation exploit for CVE-2017-5123, leveraging a vulnerability in the waitid system call to overwrite kernel memory and gain root privileges. The exploit manipulates kernel structures to escalate privileges and obtain root filesystem access.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H