CVE-2021-40839

HIGH

rencode < 1.0.6 - Denial of Service via Malformed Typecode Decoding

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-40839. PoCs published by itlabbet.

AI-analyzed exploit summary This is a working exploit for CVE-2021-40839, a Dirty Cow vulnerability variant. It leverages a race condition in the Linux kernel's memory handling to overwrite the /etc/passwd file, adding a new user with root privileges.

Description

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.

Exploits (1)

nomisec WORKING POC 1 stars

by itlabbet · poc

https://github.com/itlabbet/CVE-2021-40839

View Code ZIP pw:eip

This is a working exploit for CVE-2021-40839, a Dirty Cow vulnerability variant. It leverages a race condition in the Linux kernel's memory handling to overwrite the /etc/passwd file, adding a new user with root privileges.

Classification

Working Poc 100%

Attack Type

Lpe

Complexity

Moderate

Reliability

Racy

Target: Linux Kernel (specific versions affected by Dirty Cow)

No auth needed

Prerequisites: Local access to the target system · Compilation environment for C code

MITRE ATT&CK