CVE-2017-6074
HIGHLinux Kernel < 3.2.86 - Double Free in DCCP Packet Processing
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2017-6074. PoCs published by Andrey Konovalov, codecat007, BimsaraMalinda.
AI-analyzed exploit summary This is a local privilege escalation exploit for CVE-2017-6074, targeting a use-after-free vulnerability in the Linux kernel's DCCP implementation. It includes a bypass for SMEP/SMAP protections and achieves root by manipulating kernel structures.
Description
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
Exploits (6)
This is a local privilege escalation exploit for CVE-2017-6074, targeting a use-after-free vulnerability in the Linux kernel's DCCP implementation. It includes a bypass for SMEP/SMAP protections and achieves root by manipulating kernel structures.
This exploit triggers a use-after-free vulnerability in the Linux kernel's DCCP implementation (CVE-2017-6074), leading to a kernel crash. It creates two DCCP sockets, binds one, and manipulates socket options to exploit the flaw.
This repository contains a functional local root exploit for CVE-2017-6074, a vulnerability in the DCCP protocol implementation in the Linux kernel. The exploit includes a semi-reliable SMEP/SMAP bypass and demonstrates privilege escalation by executing arbitrary code in kernel context.
This repository contains a README for CVE-2017-6074, a DCCP double-free vulnerability in Linux Kernel 4.4.0 (Ubuntu), leading to local privilege escalation. No exploit code is present, only a title/description.
This is a functional DoS exploit for CVE-2017-6074, targeting a use-after-free vulnerability in the Linux kernel DCCP subsystem. It triggers a kernel panic by manipulating socket operations and memory allocation.
This repository contains a proof-of-concept exploit for CVE-2017-6074, a DCCP double-free vulnerability in the Linux kernel. The exploit leverages heap spraying and timer manipulation to achieve local privilege escalation (LPE) by overwriting kernel structures.
References (25)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H