CVE-2021-4034

Compilações pré-compiladas para CVE-2021-4034.

Claro que você não deveria confiar em compilações pré-compiladas :)

Esta versão funciona de forma um pouco diferente: primeiro, um objeto compartilhado mínimo é criado. Esse objeto é empacotado no binário principal e descartado na execução. O Musl é usado para a compilação, a fim de minimizar dependências (por exemplo, versões específicas da libc, talvez?)

Agradecimentos

• Aviso original da Qualys: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
• PoC de Berdav (Davide Berardi): https://github.com/berdav/CVE-2021-4034
• PoC de Blasty ([email protected]): https://haxx.in/files/blasty-vs-pkexec2.c

Binários

Alvo	Link
aarch64	cve-2021-4034_aarch64
aarch64_be	cve-2021-4034_aarch64_be
arm-eabi	cve-2021-4034_arm-eabi
arm-eabihf	cve-2021-4034_arm-eabihf
armeb-eabi	cve-2021-4034_armeb-eabi
armeb-eabihf	cve-2021-4034_armeb-eabihf
armel-eabi	cve-2021-4034_armel-eabi
armel-eabihf	cve-2021-4034_armel-eabihf
armv5l-eabi	cve-2021-4034_armv5l-eabi
armv5l-eabihf	cve-2021-4034_armv5l-eabihf
armv6-eabi	cve-2021-4034_armv6-eabi
armv6-eabihf	cve-2021-4034_armv6-eabihf
armv7l-eabihf	cve-2021-4034_armv7l-eabihf
armv7m-eabi	cve-2021-4034_armv7m-eabi
armv7r-eabihf	cve-2021-4034_armv7r-eabihf
i486	cve-2021-4034_i486
i686	cve-2021-4034_i686
m68k	cve-2021-4034_m68k
mips	cve-2021-4034_mips
mips-n32sf	cve-2021-4034_mips-n32sf
mips-sf	cve-2021-4034_mips-sf
mips64	cve-2021-4034_mips64
mips64-n32	cve-2021-4034_mips64-n32
mips64-n32sf	cve-2021-4034_mips64-n32sf
mips64el	cve-2021-4034_mips64el
mips64el-n32	cve-2021-4034_mips64el-n32
mips64el-n32sf	cve-2021-4034_mips64el-n32sf
mipsel	cve-2021-4034_mipsel
mipsel-n32	cve-2021-4034_mipsel-n32
mipsel-n32sf	cve-2021-4034_mipsel-n32sf
mipsel-sf	cve-2021-4034_mipsel-sf
powerpc	cve-2021-4034_powerpc
powerpc-sf	cve-2021-4034_powerpc-sf
powerpc64	cve-2021-4034_powerpc64
powerpc64le	cve-2021-4034_powerpc64le
powerpcle	cve-2021-4034_powerpcle
powerpcle-sf	cve-2021-4034_powerpcle-sf
riscv32	cve-2021-4034_riscv32
riscv64	cve-2021-4034_riscv64
s390x	cve-2021-4034_s390x
x86_64	cve-2021-4034_x86_64
x86_64-x32	cve-2021-4034_x86_64-x32

Compilação

Se você quiser compilar por conta própria, modifique o arquivo targets para incluir as arquiteturas que você precisa. Em seguida, execute build.sh. Você precisará do Docker.