CVE-2019-13272
HIGH KEVLinux Polkit pkexec helper PTRACE_TRACEME local root exploit
Title source: metasploitExploitation Summary
CVE-2019-13272 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added December 10, 2021.
EIP tracks 26 public exploits from researchers including Metasploit, Google Security Research, Ujas Dhami, including a Metasploit module exploits/linux/local/ptrace_traceme_pkexec_helper.
AI-analyzed exploit summary This Metasploit module exploits CVE-2019-13272, a local privilege escalation vulnerability in the Linux kernel's ptrace_link function. It leverages Polkit's pkexec helper with PTRACE_TRACEME to gain root access on vulnerable systems.
Description
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.
Exploits (26)
This Metasploit module exploits CVE-2019-13272, a local privilege escalation vulnerability in the Linux kernel's ptrace_link function. It leverages Polkit's pkexec helper with PTRACE_TRACEME to gain root access on vulnerable systems.
This exploit demonstrates a privilege escalation vulnerability in the Linux kernel (CVE-2019-13272) by abusing the PTRACE_TRACEME mechanism to create a privileged ptrace relationship, leading to potential root access. The PoC triggers a kernel panic due to incorrect credential handling.
This exploit leverages CVE-2019-13272, a race condition in the Linux kernel's ptrace implementation, to escalate privileges via pkexec. It manipulates process tracing and memory injection to spawn a root shell.
This exploit leverages CVE-2019-13272, a PTRACE_TRACEME vulnerability in Linux kernels 4.10 to 5.1.17, to achieve local privilege escalation (LPE) by manipulating the ptrace relationship during the execution of pkexec. It spawns a root shell by exploiting improper credential handling in the ptrace subsystem.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2019-13272, leveraging a PTRACE_TRACEME race condition in Linux kernels 4.10 to 5.1.17. The exploit uses pkexec to gain root privileges by manipulating process tracing and SUID execution.
This repository contains a functional local privilege escalation exploit for CVE-2019-13272, leveraging a PTRACE_TRACEME race condition in Linux kernels 4.10 to 5.1.17. The exploit uses a multi-stage approach with fake pkexec and helper binaries to gain root privileges.
This repository contains a functional exploit for CVE-2019-13272, a Linux local privilege escalation vulnerability affecting kernels below 5.1.17. The exploit leverages a ptrace-based race condition in pkexec to gain root privileges.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2019-13272, leveraging a PTRACE_TRACEME vulnerability in Linux kernels 4.10 to 5.1.17. The exploit uses pkexec to gain root access by manipulating process tracing and SUID execution.
This is a functional exploit for CVE-2019-13272, a local privilege escalation vulnerability in Polkit's pkexec. The exploit leverages improper handling of environment variables and argument injection to gain root privileges by manipulating the execution flow of pkexec.
The repository contains a functional privilege escalation exploit for CVE-2019-13272, leveraging a ptrace scope bypass in Linux systems. The exploit uses GDB to inject commands into running shell processes to escalate privileges.
The repository contains a README.md file mentioning multiple CVEs, including CVE-2015-1538 (Stagefright RCE), but lacks actual exploit code or technical details. It appears to be a placeholder or incomplete writeup.
The repository lacks exploit code or technical details, instead providing vague descriptions and requesting external review. No functional PoC or analysis is included.
This repository contains a functional exploit for CVE-2019-13272, a local privilege escalation vulnerability in Linux kernels 4.10 to 5.1.17. The exploit leverages the PTRACE_TRACEME mechanism and pkexec to gain root privileges by manipulating process tracing relationships.
The repository contains a functional PoC for CVE-2019-13272, demonstrating the ptrace vulnerability by tracing system calls in a child process. The code compiles and runs, showing system call numbers and confirming the vulnerability's applicability on unhardened systems.
This repository contains a functional exploit for CVE-2019-13272, a local privilege escalation vulnerability in Polkit's pkexec. The exploit leverages a ptrace race condition to gain root access by manipulating process credentials during a privileged execution.
The repository lacks exploit code and instead references external links in a .txt file, which is a common tactic for suspicious repos. No technical details about CVE-2019-13272 are provided.
This is a functional local privilege escalation (LPE) exploit for CVE-2019-13272, leveraging a ptrace race condition in Linux kernels 4.10 to 5.1.17. It uses pkexec to spawn a privileged process and manipulates ptrace relationships to gain root access.
This repository provides a detailed technical analysis of CVE-2019-13272, a local privilege escalation vulnerability in the Linux kernel related to the PTRACE_TRACEME system call. It includes root cause analysis, code snippets, and explanations of the ptrace mechanism and credential handling.
The repository contains only a README with a brief description of CVE-2019-13272 but no exploit code, technical details, or analysis. It appears to be a placeholder or incomplete submission.
The repository contains only a minimal README with a CVE identifier and no functional exploit code or technical details. It appears to be a placeholder or incomplete submission.
This Python script exploits CVE-2019-13272, a command injection vulnerability in the PTZ (Pan-Tilt-Zoom) camera management interface. It sends a maliciously crafted HTTP POST request with encoded commands to achieve remote code execution (RCE) on the target device.
This Metasploit module exploits CVE-2019-13272, a local privilege escalation vulnerability in the Linux kernel's ptrace_link function. It leverages Polkit's pkexec helper with PTRACE_TRACEME to gain root access on vulnerable systems.
References (30)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H