cve/cves/2008/CVE-2008-0600.md

CVE-2008-0600

Description

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.

POC

Reference

• https://www.exploit-db.com/exploits/5092
• http://marc.info/?l=linux-kernel&m=120263652322197&w=2
• http://marc.info/?l=linux-kernel&m=120266353621139&w=2
• http://marc.info/?l=linux-kernel&m=120264520431307&w=2
• http://marc.info/?l=linux-kernel&m=120266328220808&w=2
• http://marc.info/?l=linux-kernel&m=120264773202422&w=2

Github

• https://github.com/0b0111100/2008

ExploitDB

• https://www.exploit-db.com/exploits/5093
• https://www.exploit-db.com/exploits/5092

Collections

• https://github.com/helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2008/CVE-2008-0600