CVE-2018-4407 PoC — 多款Apple产品 Kernel 缓冲区错误漏洞

Source

Associated Vulnerability

Description

POC: Heap buffer overflow in the networking code in the XNU operating system kernel

Readme

# CVE-2018-4407-IOS

## CVE ? (Common Vulnerabilities and Exposures)

[TLDR](https://movaxbx.ru/2018/10/31/kernel-rce-caused-by-buffer-overflow-in-apples-icmp-packet-handling-code-cve-2018-4407/)

> The vulnerability is a heap buffer overflow in the networking code in the XNU operating
 system kernel. XNU is used by both iOS and macOS, which is why iPhones,
 iPads, and Macbooks are all affected. My exploit PoC just 
overwrites the heap with garbage, which causes an immediate kernel crash
 and device reboot.

## Installation
```bash
bash install.sh
```

## Usage

```bash
python3 exploit.py
```

## POC
![](https://github.com/zteeed/CVE-2018-4407-IOS/blob/master/poc.gif)

File Snapshot

 [4.0K]  /data/pocs/d5aab958f46711ebd25a32d635846e959e0da204
├── [2.5K]  exploit.py
├── [4.0K]  install
│   ├── [  93]  install.sh
│   └── [  39]  requirements.txt
├── [ 27M]  poc.gif
└── [ 677]  README.md

1 directory, 5 files

Remarks