CVE-2023-0179
HIGHLinux Kernel 5.5.0-5.10.164 - Local Privilege Escalation via Netfilter Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2023-0179. PoCs published by TurtleARM, H4K6, FarrimWildaxe.
AI-analyzed exploit summary This is a functional exploit for CVE-2023-0179, a stack buffer overflow in the nftables subsystem of the Linux kernel (versions 5.5 to 6.2-rc3). The exploit leverages the vulnerability to achieve local privilege escalation (LPE) by overwriting kernel structures and manipulating the modprobe_path to gain root access.
Description
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
Exploits (6)
This is a functional exploit for CVE-2023-0179, a stack buffer overflow in the nftables subsystem of the Linux kernel (versions 5.5 to 6.2-rc3). The exploit leverages the vulnerability to achieve local privilege escalation (LPE) by overwriting kernel structures and manipulating the modprobe_path to gain root access.
This repository contains a functional exploit for CVE-2023-0179, a stack buffer overflow in the nftables subsystem affecting Linux kernels 5.5 to 6.2-rc3. The exploit leverages an info leak to bypass KASLR and achieves local privilege escalation by overwriting the modprobe_path.
This repository contains a functional exploit for CVE-2023-0179, a heap overflow vulnerability in the Linux kernel's netfilter subsystem. The exploit leverages nftables rules to achieve local privilege escalation (LPE) by overwriting kernel memory and executing a ROP chain to gain root access.
This repository contains a functional exploit for CVE-2023-0179, a Linux kernel nf_tables heap overflow vulnerability. The exploit leverages a heap-based buffer overflow to achieve local privilege escalation (LPE) by overwriting kernel structures and executing a ROP chain to modify the modprobe_path.
This repository contains a functional exploit for CVE-2023-0179, a Linux kernel vulnerability in nf_tables. The exploit leverages a stack overflow to overwrite the jumpstack and execute a ROP chain, ultimately achieving local privilege escalation by overwriting the modprobe_path.
This repository contains a functional proof-of-concept exploit for CVE-2023-0179, a stack buffer overflow in the nftables subsystem affecting Linux kernels 5.5 to 6.2-rc3. The exploit includes code to trigger an info leak and a kernel crash via crafted nftables rules, leveraging unprivileged user and network namespaces.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H