CVE-2023-32629
HIGH EXPLOITEDUbuntu Linux - Local Privilege Escalation via OverlayFS Permission Check Bypass
Title source: llmExploitation Summary
CVE-2023-32629 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 11 public exploits from researchers including ThrynSec, kaotickj, k4but0, including a Metasploit module exploits/linux/local/gameoverlay_privesc.
AI-analyzed exploit summary This PoC exploits CVE-2023-32629 and CVE-2023-2640 to achieve local privilege escalation on Ubuntu systems by leveraging overlayfs and capability manipulation to gain root access via a Python script.
Description
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels
Exploits (11)
This PoC exploits CVE-2023-32629 and CVE-2023-2640 to achieve local privilege escalation on Ubuntu systems by leveraging overlayfs and capability manipulation to gain root access via a Python script.
This repository contains a Python script that checks for the presence of CVE-2023-32629 and CVE-2023-2640 vulnerabilities in the Linux kernel's OverlayFS module. It performs checks for vulnerable kernel versions, functions, and OverlayFS usage.
This exploit leverages a local privilege escalation vulnerability in Ubuntu by manipulating overlayfs and setcap to gain root access. It uses unshare to create a new mount namespace and abuses capabilities to escalate privileges.
The repository contains only a README.md file with minimal information about CVE-2023-32629 and CVE-2023-2640, claiming Ubuntu privilege escalation but lacking any actual exploit code or technical details.
The repository contains functional exploit code for multiple CVEs, including CVE-2023-32629. The exploits demonstrate remote code execution (RCE) and other offensive techniques, with clear usage instructions and technical implementation details.
This repository provides a detailed technical analysis of CVE-2023-32629, a local privilege escalation vulnerability in OverlayFS. It explains the exploitation process, including the misuse of user namespaces and filesystem capabilities during copy-up operations.
This repository contains a functional exploit for CVE-2023-2640 and CVE-2023-32629, which are Ubuntu Kernel OverlayFS vulnerabilities allowing local privilege escalation. The exploit leverages a multi-step process to escape user namespace restrictions and achieve true host root access.
The repository contains functional exploit scripts for CVE-2023-32629, leveraging overlayfs and capability manipulation to achieve local privilege escalation on Ubuntu systems. The scripts use unshare, setcap, and mount commands to exploit the vulnerability and spawn a root shell.
The repository contains a functional privilege escalation exploit for CVE-2023-32629, leveraging overlayfs and capability manipulation to gain root access. The script automates the exploitation process by creating directories, copying Python, setting capabilities, and mounting an overlay filesystem.
The repository contains a functional exploit script for CVE-2023-32629, leveraging OverlayFS misconfigurations to achieve local privilege escalation (LPE) on vulnerable Ubuntu systems. The script uses `unshare`, `setcap`, and `mount` to manipulate capabilities and file system layers, ultimately executing commands as root.
This Metasploit module exploits CVE-2023-2640 and CVE-2023-32629, which involve unsafe overlayfs handling in specific Ubuntu kernels, allowing privilege escalation and container escape by manipulating setuid capabilities via overlayfs mounts.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H