CVE-2021-22555 PoC — Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

Source

https://github.com/veritas501/CVE-2021-22555-PipeVersion

Associated Vulnerability

Title:Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE (CVE-2021-22555)
Description:A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

Description

CVE-2021-22555 exploit rewritten with pipe primitive

Readme

# CVE-2021-22555 pipe version

Using pipe-primitive  to exploit CVE-2021-22555, so no kaslr leak nor smap smep ktpi bypass is needed :)

(Q: What is pipe-primitive?  A: https://github.com/veritas501/pipe-primitive)

Tested on both Linux 4.15 and Linux 5.8

![](assets/tested_on_4.15.png)

![](assets/tested_on_5.8.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!