Skip to content

Commit

Permalink
CVE-2017-5618: move, fix exploit-db URL, add author
Browse files Browse the repository at this point in the history
  • Loading branch information
bcoles authored Jun 17, 2021
1 parent a1b33c8 commit e3d768b
Showing 1 changed file with 11 additions and 10 deletions.
21 changes: 11 additions & 10 deletions linux-exploit-suggester.sh
Original file line number Diff line number Diff line change
Expand Up @@ -1318,6 +1318,17 @@ Comments: Uses "Stack Clash" technique
EOF
)

EXPLOITS_USERSPACE[((n++))]=$(cat <<EOF
Name: ${txtgrn}[CVE-2017-5618]${txtrst} setuid screen v4.5.0 LPE
Reqs: pkg=screen,ver==4.5.0
Tags:
Rank: 1
analysis-url: https://seclists.org/oss-sec/2017/q1/184
exploit-db: 41154
author: Xiphos Research Ltd
EOF
)

EXPLOITS_USERSPACE[((n++))]=$(cat <<EOF
Name: ${txtgrn}[CVE-2018-1000001]${txtrst} RationalLove
Reqs: pkg=glibc|libc6,ver<2.27,CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1,x86_64
Expand Down Expand Up @@ -1454,16 +1465,6 @@ author: worawit
EOF
)

EXPLOITS_USERSPACE[((n++))]=$(cat <<EOF
Name: ${txtgrn}[CVE-2017-5618]${txtrst} setuid screen v4.5.0 LPE
Reqs: pkg=screen,ver==4.5.0
Tags:
Rank: 1
analysis-url: https://seclists.org/oss-sec/2017/q1/184
exploit-db: https://www.exploit-db.com/exploits/41154
EOF
)

###########################################################
## security related HW/kernel features
###########################################################
Expand Down

0 comments on commit e3d768b

Please sign in to comment.