CVE-2023-2640 PoC — Canonical Ubuntu Linux 安全漏洞

Source

https://github.com/OllaPapito/gameoverlay

Associated Vulnerability

Title:Canonical Ubuntu Linux 安全漏洞 (CVE-2023-2640)
Description:On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.

Description

CVE-2023-2640 CVE-2023-32629

Readme

Gameover(lay) código shell pra escalonamento de privilégios(root) no UBUNTU.

Ubuntu: 23.04 22.10 22.04 (not v5.15.0) 20.04 (v.5.4.0 for 32629) 18.04 (v.5.4.0 for 32629)

execute com ./overlay.sh

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!