Linux Kernel – ‘BadIRET’ Local Privilege Escalation

Exploit Database
109 阅读

作者： Ren Kimura

日期： 2017-07-24
类别：
- local
平台：
- linux
来源：https://www.exploit-db.com/exploits/44205/

# CVE-2014-9322 PoC for Linux kernel

CVE-2014-9322 (a.k.a BadIRET) proof of concept for Linux kernel.

This PoC uses only syscalls not any libraries, like pthread. Threads are implemented using raw Linux syscalls.

[Raw Linux Threads via System Calls](http://nullprogram.com/blog/2015/05/15/)

# Usage

</code><code>

$ make

</code><code>

**badiret.elf** is an ELF executable.

**badiret.bin** is a raw binary that can be used as payload.

# Reference

[Exploiting “BadIRET” vulnerability (CVE-2014-9322, Linux kernel privilege escalation)](https://blogs.bromium.com/exploiting-badiret-vulnerability-cve-2014-9322-linux-kernel-privilege-escalation/)

Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44205.zip

last Exploits
Linux Kernel – ‘BadIRET’ Local Privilege Escalation的更多信息

NCMedia Sound Editor Pro 7.5.1 – ‘MRUList201202.dat’ File Handling Buffer Overflow：
AIX 7.1 – ‘lquerylv’ Local Privilege Escalation：
Atomic Alarm Clock 6.3 – Stack Overflow (Unicode+SEH)：
InterVideo WinDVD 5 – ‘cpqdvd.dll’ DLL Hijacking：
Microsoft Vista – ‘fveapi.dll’ BitLocker Drive Encryption API Hijacking：
Axessh 4.2 – ‘Log file name’ Local Stack-based Buffer Overflow：
Exim 4.84-3 – Local Privilege Escalation：
IBM AIX 6.1/7.1 – Local Privilege Escalation：