cve/2019/CVE-2019-7304.md

CVE-2019-7304

Description

Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.

POC

Reference

• https://www.exploit-db.com/exploits/46361
• https://www.exploit-db.com/exploits/46362

Github

• https://github.com/0xStrygwyr/OSCP-Guide
• https://github.com/0xT11/CVE-POC
• https://github.com/0xZipp0/OSCP
• https://github.com/0xsyr0/OSCP
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Al1ex/LinuxEelvation
• https://github.com/BGrewell/SockPuppet
• https://github.com/Dhayalanb/Snapd-V2
• https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits
• https://github.com/Ly0nt4r/OSCP
• https://github.com/SecuritySi/CVE-2019-7304_DirtySock
• https://github.com/SirElmard/ethical_hacking
• https://github.com/Snoopy-Sec/Localroot-ALL-CVE
• https://github.com/VieVaWaldi/DirtySock
• https://github.com/WalterEhren/DirtySock
• https://github.com/WalterEren/DirtySock
• https://github.com/anoaghost/Localroot_Compile
• https://github.com/bgrewell/SockPuppet
• https://github.com/blkdevcon/awesome-starz
• https://github.com/chorankates/OpenAdmin
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/e-hakson/OSCP
• https://github.com/eljosep/OSCP-Guide
• https://github.com/elvi7major/snap_priv_esc
• https://github.com/f4T1H21/HackTheBox-Writeups
• https://github.com/f4T1H21/dirty_sock
• https://github.com/fei9747/LinuxEelvation
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/initstring/dirty_sock
• https://github.com/kgwanjala/oscp-cheatsheet
• https://github.com/lacework/up-and-running-packer
• https://github.com/nitishbadole/oscp-note-3
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/oscpname/OSCP_cheat
• https://github.com/rakjong/LinuxElevation
• https://github.com/revanmalang/OSCP
• https://github.com/scottford-lw/up-and-running-packer
• https://github.com/siddicky/yotjf
• https://github.com/txuswashere/OSCP
• https://github.com/xhref/OSCP