Awesome-POC/操作系统漏洞/Linux openvswitch 权限提升漏洞 CVE-2022-2639.md
2024-11-06 14:10:36 +08:00

24 lines
504 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Linux openvswitch 权限提升漏洞 CVE-2022-2639
## 漏洞描述
由于 openvswitch 模块在处理大量actions的情况下可能存在越界写入漏洞本地经过身份认证的攻击者可利用此漏洞获取root权限
## 漏洞影响
```
3.13 ≤ Linux Kernel < 5.18
```
## 漏洞复现
编译POC并运行获取Root权限
![](images/202209131039922.png)
## 漏洞POC
https://github.com/avboy1337/CVE-2022-2639-PipeVersion
![image-20220913103910738](images/202209131039877.png)