CVE-2023-20938-Public

README 이 저장소는 취약점 동작을 시연하고 연구하기 위한 CVE-2023-20938 버그 트리거 를 포함하고 있습니다. QEMU 에뮬레이션 : QEMU에서 문제를 재현하기 위한 버그 트리거는 libdevbinder/ 디렉터리에 있습니다. 실제 기기 : 실제 Android 기기에서 실행하기 위한 버그 트리거는 src/ 디렉터리에 있습니다. 이 코드는 교육 및 보안 연구 목적 취약점 분석, 재현, 익스플로잇 메커니즘 이해 등으로만 제공됩니다. 오용 또는 프로덕션 환경 배포를 위한 것이 아닙니다...

Exploit for Use After Free in Google Android

CVE-2023-20938 — Android binder UAF privilege escalation A lo...

Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6133-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6133-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some...

Ubuntu: Security Advisory (USN-6133-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6085-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6080-1: Linux kernel vulnerabilities

It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. CVE-2022-27672 Zheng Wang discovered that the Intel i915 graphics...

Ubuntu: Security Advisory (USN-5940-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-20938

In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2023-20938

CVE-2023-20938 affects the Android kernel via binder_transaction_buffer_release in binder.c, causing a use-after-free due to improper input validation. This can enable local privilege escalation with no extra execution privileges required and without user interaction; the advisory consistently no...