Skip to content

Commit

Permalink
automatic module_metadata_base.json update
Browse files Browse the repository at this point in the history
  • Loading branch information
msjenkins-r7 committed Sep 26, 2024
1 parent dbc020a commit b00b808
Showing 1 changed file with 61 additions and 0 deletions.
61 changes: 61 additions & 0 deletions db/modules_metadata_base.json
Original file line number Diff line number Diff line change
Expand Up @@ -86832,6 +86832,67 @@

]
},
"exploit_linux/local/cve_2023_0386_overlayfs_priv_esc": {
"name": "Local Privilege Escalation via CVE-2023-0386",
"fullname": "exploit/linux/local/cve_2023_0386_overlayfs_priv_esc",
"aliases": [

],
"rank": 600,
"disclosure_date": "2023-03-22",
"type": "exploit",
"author": [
"xkaneiki",
"sxlmnwb",
"Takahiro Yokoyama"
],
"description": "This exploit targets the Linux kernel bug in OverlayFS.\n\n A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities\n was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount.\n This uid mapping bug allows a local user to escalate their privileges on the system.",
"references": [
"CVE-2023-0386",
"URL-https://github.com/sxlmnwb/CVE-2023-0386",
"URL-https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/overlayfs-cve-2023-0386",
"URL-https://securitylabs.datadoghq.com/articles/overlayfs-cve-2023-0386/",
"URL-https://www.vicarius.io/vsociety/posts/cve-2023-0386-a-linux-kernel-bug-in-overlayfs"
],
"platform": "Linux",
"arch": "x64",
"rport": null,
"autofilter_ports": [

],
"autofilter_services": [

],
"targets": [
"Automatic"
],
"mod_time": "2024-09-24 08:18:30 +0000",
"path": "/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb",
"is_install_path": true,
"ref_name": "linux/local/cve_2023_0386_overlayfs_priv_esc",
"check": true,
"post_auth": false,
"default_credential": false,
"notes": {
"Reliability": [
"repeatable-session"
],
"Stability": [
"crash-safe"
],
"SideEffects": [
"artifacts-on-disk"
]
},
"session_types": [
"shell",
"meterpreter"
],
"needs_cleanup": true,
"actions": [

]
},
"exploit_linux/local/desktop_privilege_escalation": {
"name": "Desktop Linux Password Stealer and Privilege Escalation",
"fullname": "exploit/linux/local/desktop_privilege_escalation",
Expand Down

0 comments on commit b00b808

Please sign in to comment.