vendor:
Linux Kernel
by:
rebel
7.8
CVSS
HIGH
linux AF_PACKET race condition
362
CWE
Product Name: Linux Kernel
Affected Version From: 4.4.0
Affected Version To: 4.4.0-53.74
Patch Exists: YES
Related CWE: CVE-2016-8655
CPE: o:linux:linux_kernel
Metasploit:
https://www.rapid7.com/db/vulnerabilities/redhat_linux-cve-2017-1000111/, https://www.rapid7.com/db/vulnerabilities/oracle_linux-cve-2017-1000111/, https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2017-1000111/, https://www.rapid7.com/db/vulnerabilities/huawei-euleros-2_0_sp1-cve-2017-1000111/, https://www.rapid7.com/db/vulnerabilities/debian-cve-2017-1000111/, https://www.rapid7.com/db/vulnerabilities/ubuntu-cve-2017-1000111/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2017-1000111/, https://www.rapid7.com/db/vulnerabilities/amazon_linux-cve-2017-1000111/, https://www.rapid7.com/db/vulnerabilities/redhat_linux-cve-2016-8655/, https://www.rapid7.com/db/vulnerabilities/debian-cve-2016-8655/, https://www.rapid7.com/db/vulnerabilities/oracle_linux-cve-2016-8655/, https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2016-8655/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2016-8655/, https://www.rapid7.com/db/vulnerabilities/ubuntu-cve-2016-8655/, https://www.rapid7.com/db/vulnerabilities/amazon_linux-cve-2016-8655/, https://www.rapid7.com/db/modules/exploit/linux/local/af_packet_chocobo_root_priv_esc/
Other Scripts:
N/A
Platforms Tested: Ubuntu 14.04 / 16.04 (x86_64)
2016
chocobo_root.c
chocobo_root.c is a linux AF_PACKET race condition exploit for CVE-2016-8655. It includes KASLR and SMEP/SMAP bypasses and is tested on Ubuntu 14.04 / 16.04 (x86_64) kernels 4.4.0 before 4.4.0-53.74. The exploit is used to gain root access on the system.
Mitigation:
Apply the latest security patches and updates to the system.
