ksmbd-n-day

README このリポジトリは、私の研究記事 Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days に付随するものであり、2023年のN-Day（CVE-2023-52440およびCVE-2023-4130）向けのPOCを開発しています。 カーネルの.config、カーネル実行スクリプト、イメージビルドスクリプト、およびPOCを提供します。 イメージ作成スクリプトは Syzkaller から取得しました。impacket のdiffはコミット...

Photon OS 5.0: Linux PHSA-2023-5.0-91-0101

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0101. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Exploit for CVE-2023-4130

README This repo accompanies my research article Eternal-Tux...

CVE-2023-52440

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...

CVE-2023-52440 ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...