Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-7184 PoC — Linux kernel 权限许可和访问控制问题漏洞

Source
https://github.com/b1nhack/CVE-2017-7184
Associated Vulnerability
Title:Linux kernel 权限许可和访问控制问题漏洞 (CVE-2017-7184)
Description:The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52.
Description
CVE-2017-7184 exp
File Snapshot

 [4.0K]  /data/pocs/e492d104c618fc97b47632bcf08f5ce9dc26ddf4
├── [ 117]  bash.c
├── [7.6K]  exp.c
├── [1.0K]  LICENSE
├── [ 164]  Makefile
└── [ 360]  run.sh

0 directories, 5 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →