CVE-2022-0435
HIGHLinux Kernel >=4.8 <4.9.301 - Stack Overflow in TIPC Protocol
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-0435. PoCs published by Spydomain, wlswotmd, sandesh9978.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2022-0435, a stack overflow vulnerability in the Linux kernel's TIPC module. The exploit includes KASLR support and demonstrates privilege escalation to root by leveraging crafted TIPC packets and memory corruption techniques.
Description
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.
Exploits (3)
This repository contains a functional exploit for CVE-2022-0435, a stack overflow vulnerability in the Linux kernel's TIPC module. The exploit includes KASLR support and demonstrates privilege escalation to root by leveraging crafted TIPC packets and memory corruption techniques.
This is a local privilege escalation (LPE) PoC for CVE-2022-0435, targeting a vulnerability in the TIPC module of the Linux kernel. The exploit manipulates TIPC protocol messages to achieve privilege escalation, assuming KASLR is disabled.
This repository contains a functional local privilege escalation exploit for CVE-2022-0435, targeting a stack overflow vulnerability in the Linux kernel's TIPC protocol. The exploit includes ROP chain construction, KASLR bypass, and a root shell payload.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H