PT-2019-16759 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8 Description: A race condition in the perf event open function allows local attackers to leak sensitive data from setuid programs. This occurs because no relevant locks, specifically the cred guard mutex, are...

Linux Kernel 2.6.22 3.9 - Dirty COW PTRACE_POKEDATA Race Condition (Write Access Method)

Linux Kernel 2.6.22 3.9 - Dirty COW PTRACEPOKEDATA Race Condition Write Access Method // $ echo pikachu|sudo tee pokeball;ls -l pokeball;gcc -pthread pokemon.c -o d;./d pokeball miltank;cat pokeball include //// pikachu include //// -rw-r--r-- 1 root root 8 Apr 4 12:34 pokeball include ////...

Exploit for Race Condition in Canonical Ubuntu_Linux

0xdeadbeef PoC for Dirty COW CVE-2...

Android debuggerd.cpp elevation of privilege vulnerability

Android is a mobile operating system based on the Linux open kernel, and Debuggerd is one of the system startup process components. An elevation of privilege vulnerability exists in the debuggerd/debuggerd.cpp file in Android Debuggerd, which stems from the program's failure to properly handle th...

PT-2016-5717

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-09-01 Android versions 7.0 before 2016-09-01 Description The issue is related to the interaction between PTRACE ATTACH operations and...

The vulnerability of the Linux operating system, which allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the Linux operating system’s kernel is related to the improper limitation on the use of non- canonical values for the saved RIP address during system calls that do not utilize IRET. Exploiting this vulnerability can allow an attacker, operating locally, to increase their...

Vulnerability of the Linux operating system, leading to the exposure of information

Overflow in the getdumpable function of the ptrace subsystem leads to the disclosure of information. Only those systems are vulnerable where the sysctl fs.suiddumpable variable is set to 2 it is not the default value...

CRIU Information Disclosure Vulnerability

CRIU Checkpoint/Restore In Userspace is a set of Linux userspace userspace on the implementation of the checkpoint/restore function of the software to freeze and restore the execution of tools. The tool supports freezing or partially freezing the execution of an application and saving its executi...

Use after free

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

UBUNTU-CVE-2015-5231

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

CVE-2015-5231

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

CVE-2015-5231

CVE-2015-5231 affects the CRIU service daemon, where it does not properly restrict access to non-dumpable processes. This allows local attackers to obtain sensitive information through (1) process dumps or (2) ptrace access. The vulnerability is consistently described across multiple sources (NVD...

CVE-2015-5231

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

PT-2016-3675

Name of the Vulnerable Software and Affected Versions CRIU affected versions not specified Description The issue concerns the service daemon in CRIU, which fails to properly restrict access to non-dumpable processes. This allows local users to obtain sensitive information through either process...

CVE-2015-5231: Exposure of Sensitive Information to an Unauthorized Actor

The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...

PT-2019-4449

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.4.x through 4.4.190 Linux kernel versions 4.9.x through 4.9.190 Linux kernel versions 4.14.x through 4.14.141 Linux kernel versions 4.19.x through 4.19.69 Linux kernel versions 5.2.x through 5.2.11 Description The issue...

Maybe - See What A Program Does Before Deciding Whether You Really Want It To Happen

rm -rf pic Are you sure? Are you one hundred percent sure? ... allows you to run a command and see what it does to your files without actually doing it! After reviewing the operations listed, you can then decide whether you really want these things to happen or not. What is this sorcery?!? maybe...

Linux kernel elevation of privilege vulnerability (CNVD-2016-01042)

The Linux kernel is an open source, free operating system kernel originally done by Linus Torvalds. A security vulnerability exists in the kernel/ptrace.c file in Linux kernel 4.4.1 and earlier versions, which stems from the program's failure to properly handle uid and gid mappings. A local...

CVE-2015-8709

kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor...

DEBIAN-CVE-2015-8709

kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor...