Exploitation Summary
EIP tracks 6 public exploits for CVE-2017-7308.
PoCs published by Metasploit, Andrey Konovalov, bcoles, including Metasploit module exploits/linux/local/af_packet_packet_set_ring_priv_esc.
AI-analyzed exploit summary This Metasploit module exploits a heap-out-of-bounds write in the packet_set_ring function (CVE-2017-7308) in the Linux kernel to achieve local privilege escalation. It targets Ubuntu Xenial kernels 4.8.0 < 4.8.0-46 and includes bypasses for SMEP, SMAP, and KASLR.
Description
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.
Exploits (6)
This Metasploit module exploits a heap-out-of-bounds write in the packet_set_ring function (CVE-2017-7308) in the Linux kernel to achieve local privilege escalation. It targets Ubuntu Xenial kernels 4.8.0 < 4.8.0-46 and includes bypasses for SMEP, SMAP, and KASLR.
This is a local privilege escalation exploit for CVE-2017-7308, targeting a use-after-free vulnerability in the Linux kernel's packet socket implementation. It includes KASLR bypass and SMEP/SMAP bypass techniques to achieve root privileges on vulnerable systems.
This is a local privilege escalation exploit for CVE-2017-7308, targeting Linux kernels 4.8.0-34 to 4.8.0-45. It bypasses SMEP and SMAP protections to achieve root access by manipulating packet socket structures and kernel memory.
This repository contains a functional local root exploit for CVE-2017-7308, targeting a vulnerability in the AF_PACKET sockets implementation in the Linux kernel. The exploit includes a SMEP & SMAP bypass and has been tested on Ubuntu kernel 4.8.0-41-generic.
This is a local privilege escalation exploit for CVE-2017-7308, targeting a use-after-free vulnerability in the Linux kernel's packet socket implementation. It includes KASLR bypass and SMEP/SMAP bypass techniques to achieve root privileges.
This Metasploit module exploits a heap-out-of-bounds write in the packet_set_ring function (CVE-2017-7308) to achieve local privilege escalation on vulnerable Linux kernels. It includes bypasses for SMEP, SMAP, and KASLR, and targets Ubuntu Xenial kernels 4.8.0 < 4.8.0-46.
References (12)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H