ksmbd-n-day

README 이 저장소는 제 연구 기사 Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days를 함께 제공합니다. 해당 기사에서는 2023년의 n-데이CVE-2023-52440 및 CVE-2023-4130에 대한 POC를 개발합니다. 커널 .config, 커널 실행 스크립트, 이미지 빌드 스크립트 및 POC를 제공합니다. 이미지 생성 스크립트는 Syzkaller에서 가져왔습니다. impacket의 diff는 커밋...

Photon OS 5.0: Linux PHSA-2023-5.0-91-0101

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0101. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Exploit for CVE-2023-4130

README This repo accompanies my research article Eternal-Tux...

CVE-2023-52440

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...

CVE-2023-52440 ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...