Exploitation Summary
EIP tracks 6 public exploits for CVE-2018-17182. PoCs published by Google Security Research, jas502n, codecat007.
AI-analyzed exploit summary This exploit leverages a use-after-free vulnerability in the Linux kernel's VMA cache implementation (CVE-2018-17182) to achieve local privilege escalation. The PoC manipulates sequence numbers to trigger a stale VMA cache entry, leading to arbitrary memory access and ultimately a root shell.
Description
An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.
Exploits (6)
This exploit leverages a use-after-free vulnerability in the Linux kernel's VMA cache implementation (CVE-2018-17182) to achieve local privilege escalation. The PoC manipulates sequence numbers to trigger a stale VMA cache entry, leading to arbitrary memory access and ultimately a root shell.
This repository contains a working proof-of-concept exploit for CVE-2018-17182, a use-after-free (UAF) vulnerability in the Linux kernel's VMA cache. The exploit targets Ubuntu 18.04 with kernel version 4.15.0-34-generic and can take 40 minutes to an hour to achieve root shell access.
This repository contains a functional exploit for CVE-2018-17182, a Linux kernel VMA-UAF vulnerability. The exploit demonstrates privilege escalation by leveraging a use-after-free bug in the VMA cache, leading to root access on vulnerable systems.
This repository contains a working local privilege escalation (LPE) exploit for CVE-2018-17182, targeting a use-after-free vulnerability in the Linux kernel's VMA cache. The exploit manipulates memory mappings and sequence numbers to achieve root access on vulnerable systems.
This PoC exploits a use-after-free (UAF) vulnerability in the Linux kernel (CVE-2018-17182) by manipulating memory mappings and mmap sequences to achieve local privilege escalation. It uses prctl and mmap operations to trigger the vulnerability and gain control over freed memory regions.
This repository contains a working proof-of-concept exploit for CVE-2018-17182, a Linux kernel VMA-UAF vulnerability. The exploit targets the Linux kernel's memory management subsystem, specifically the VMA cache, to achieve local privilege escalation (LPE) to root.
References (16)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H