New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Exploitation on Debian 7 #5

Open

sandycrack opened this issue Apr 4, 2021 · 1 comment

sandycrack commented Apr 4, 2021

Is exploitation possible on Debian 7.11(x86_64) sudo version 1.8.5p2

Kernel: 3.10.0

ldd version: 2.13-38+deb7u12

POCs lead to segfault and the last resort timestamp race is not effective

Any help would be appreciated!

Owner

worawit commented Apr 6, 2021

Debian 7 is very old. An exploit with tcache method definitely does not work.

I don't know whether Debian 7 is exploitable. All exploits in this repository definitely do not work.

You have to debug heap usage. I would start from exploit_nss_u14.py because libc on Ubuntu14.04 and Debian7 are eglibc.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment