CVE-2019-7304 PoC — Local privilege escalation via snapd socket

Source

Associated Vulnerability

Title:Local privilege escalation via snapd socket (CVE-2019-7304)
Description:Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.

Description

Local Privilege Escalation via snapd (CVE-2019-7304) Remastered PoC exploit

Readme

# dirty_sock
Local Privilege Escalation via snapd (CVE-2019-7304) Remastered PoC exploit<br>
Credit goes to [initstring](https://github.com/initstring/). Original [dirty_sock](https://github.com/initstring/dirty_sock).

## Usage
Wait ~40 seconds before executing the script again otherwise it sucks.
```bash
chmod u+x lpe.py
./lpe.py
```

![](lpe.gif)

File Snapshot


 [4.0K]  /data/pocs/bcdec2defdc5f39e174e9c957d0425725bcc75b4
├── [ 34K]  LICENSE
├── [ 83K]  lpe.gif
├── [2.6K]  lpe.py
└── [ 351]  README.md

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!