CVE-2023-4911

CVE-2023-4911 Esto es un PoC Prueba de Concepto para la vulnerabilidad de escalada de privilegios Looney Tunables en Linux. Esto está basado en este PoC. Muchas gracias a leesh3288. Aquí puedes encontrar un informe muy detallado, y aquí puedes ver un video muy interesante de IppSec. Uso Comprueba...

CVE-2023-4911

CVE-2023-4911 这是针对 CVE-2023-4911（"Looney Tunables"）的概念验证代码，它利用了 glibc 动态加载器中 GLIBCTUNABLES 环境变量解析函数 parsetunables 的一个 bug。 这是将 C 语言的概念验证代码重写为纯 Python 实现。我这样做是为了更轻松地为其他平台定制漏洞利用代码。 唯一的依赖是 pwntools，可以通过以下方式安装： root@kitploit: python3 -m pip install --upgrade pwntools 原始 C...

looney-tunables-CVE-2023-4911

CVE-2023-4911 Looney Tunables 的 PoC 这是一个 CVE-2023-4911（又名 "Looney Tunables"）的 PoC，利用 glibc 动态加载器中 GLIBCTUNABLES 环境变量解析函数 parsetunables 的漏洞。 开始使用 执行程序 我们可以检查目标是否易受攻击 root@kitploit: env -i "GLIBCTUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=printf '%08192x' 1" /usr/bin/su --help 如果我们收到...

looneyCVE

Paso 1 Comprueba la versión de glibc root@kitploit: ldd --version Comprueba si una máquina es vulnerable a Looney Tunables CVE-2023-4911 root@kitploit: env -i "GLIBCTUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=printf '%08192x' 1" /usr/bin/su --help Si obtenemos un Segmentation fault cor...

CVE-2023-4911

PoC de CVE-2023-4911 "Looney Tunables" Este es un PoC de CVE-2023-4911 también conocido como "Looney Tunables" que explota un error en la función de análisis de variables de entorno GLIBCTUNABLES del cargador dinámico de glibc, parsetunables. El código ha sido probado en Ubuntu 22.04.3 con la...

CVE-2023-4911-PoC

Vulnerabilidad del cargador dinámico de la Biblioteca C de GNU CVE-2023-4911 Resumen La Biblioteca C de GNU glibc actúa como la biblioteca C del sistema GNU y es fundamental para los sistemas basados en Linux. En su núcleo, glibc define funcionalidades esenciales para los programas, incluyendo...

CVE-2023-4911-Lab

CVE-2023-4911 "Looney Tunables" 分析环境 基于 Docker 的实践环境，用于分析 GNU C Library glibc 动态加载器中的缓冲区溢出漏洞（本地权限提升）并开发利用代码。 CVE 信息 项目| 内容 ---|--- CVE 编号| CVE-2023-4911 别名| Looney Tunables 影响对象| GNU C Library glibc 2.34 2.38 受影响版本| Ubuntu 22.04 — libc6 2.35-0ubuntu3.3 及以下 补丁版本| libc6 2.35-0ubuntu3.4 USN-6404-1,...

CVE-2023-4911

Vulnerabilidad de desbordamiento del búfer del montón de glibc CVE-2023-4911 Elemento| Contenido ---|--- ID CVE| CVE-2023-4911 Tipo de ataque| Desbordamiento del búfer del montón → Escalada de privilegios local CVSS 3.1| 7.8 Alta Fecha de divulgación| 2023-10-03 Punto vulnerable| Analizador...

CentOS 8 : glibc (CESA-2023:5455)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:5455 advisory. - A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode vi...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911...

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBCTUNABLES environment variables when launching binaries with SUID permission to execute code...

Glibc Tunables Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 561, '3602eac894717d56555552c84fc6b0e4d6a4af72' = 561, 'a99db3715218b641780b04323e4ae5953d68a927' = 561, 'a8daca28288575ffc8c7641d40901b0148958fb1...

Glibc Tunables Privilege Escalation Exploit

A buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. It has been dubbed Looney Tunables. This issue allows an local attacker to use maliciously crafted GLIBCTUNABLES when launching binaries with SUID permission to execute co...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

CVE-2023-4911-Looney-Tunables Looney Tunables Local privilege...

Oracle Linux 8 : glibc (ELSA-2023-5455)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5455 advisory. - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode. - CVE-2023-4813: potential use-after-free in gaihinet RHEL-2435. Tenable has...

glibc ld.so Local Privilege Escalation Vulnerability

Dubbed Looney Tunables, Qualys discovered a buffer overflow vulnerability in the glibc dynamic loader's processing of the GLIBCTUNABLES environment variable. This vulnerability was introduced in April 2021 glibc 2.34 by commit 2ed18c. Looney Tunables: Local Privilege Escalation in the glibc's ld....

glibc ld.so Local Privilege Escalation

Qualys Security Advisory Looney Tunables: Local Privilege Escalation in the glibc's ld.so CVE-2023-4911 ======================================================================== Contents ======================================================================== Summary Analysis Proof of concept...

Oracle Linux 9 : glibc (ELSA-2023-12854)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12854 advisory. 2.34-60.0.3 - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi Tenable has extracted the preceding...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

PoC of CVE-2023-4911 "Looney Tunables" This is a PoC of CVE-2...

CVE-2023-4911

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBCTUNABLES environment variables when launching binaries with SUID permission to execute code...