CVE-2016-5195highbajo ataqueCWE-362

CVE-2016-5195

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Linux+ Monitorear linux

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Prioriza la corrección. Ella está bajo explotación confirmada por CISA y tiene prueba de concepto pública.

ssvc Actcvss 7epss 84%
de la publicación al armael mismo día
Publicada en NVD10 nov
1ª PoC19 oct
CISA KEV+1939d
Lo que declaran los fabricantes (VEX)

Declaraciones oficiales de los fabricantes en formato CSAF/VEX: si su producto está afectado, ya corregido o descartado — y por qué. Es afirmación del fabricante, no juicio de Vexday.

Red Hatdocumento VEX ↗
Corregido
43 productos (977 componentes)
Red Hat Enterprise Linux Server (v. 7) · Red Hat Enterprise Linux Server EUS (v. 7.1) · Red Hat Enterprise Linux (v. 5 server) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Enterprise Linux Server EUS (v. 6.6) · y otros 38
corrección ↗
No afectado
1 producto — porque el código vulnerable no está presente en el producto
Red Hat Enterprise Linux 4
Acción exigida por CISAplazo federal: 2022-03-24

Apply updates per vendor instructions.

En resumen

Una falla en Linux permite que alguien con acceso local engañe al sistema para escribir en memoria que debería ser solo lectura, permitiendo tomar el control. Esto ocurre porque el sistema no gestiona correctamente una protección llamada copy-on-write.

Detalle técnico

Condición de carrera en mm/gup.c del kernel Linux 2.x–4.x anterior a 4.8.3 permite escalada de privilegios local explotando manejo inadecuado del mecanismo copy-on-write (COW). Un usuario sin privilegios puede escribir en asignaciones de memoria de solo lectura manipulando referencias de página en accesos concurrentes, resultando en ejecución de código a nivel kernel.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/a
PoCs públicas encontradas — 144✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/40611exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/40847exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/40616exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/40839exploitdbwww.exploit-db.com/exploits/40838no verificadogithubgithub.com/timwr/CVE-2016-5195★ 1018githubgithub.com/firefart/dirtycow★ 932githubgithub.com/scumjr/dirtycow-vdso★ 510githubgithub.com/gbonacini/CVE-2016-5195★ 341githubgithub.com/r1is/CVE-2022-0847★ 281githubgithub.com/hyln9/VIKIROOT★ 271githubgithub.com/Brucetg/DirtyCow-EXP★ 142githubgithub.com/DavidBuchanan314/cowroot★ 32githubgithub.com/aishee/scan-dirtycow★ 16githubgithub.com/xlucas/dirtycow.cr★ 13githubgithub.com/pgporada/ansible-role-cve★ 10githubgithub.com/whu-enjoy/CVE-2016-5195★ 10githubgithub.com/imust6226/dirtcow★ 9githubgithub.com/jas502n/CVE-2016-5195★ 7githubgithub.com/sideeffect42/DirtyCOWTester★ 7githubgithub.com/oleg-fiksel/ansible_CVE-2016-5195_check★ 6githubgithub.com/talsim/root-dirtyc0w★ 5githubgithub.com/droidvoider/dirtycow-replacer★ 4githubgithub.com/esc0rtd3w/org.cowpoop.moooooo★ 3githubgithub.com/LinuxKernelContent/DirtyCow★ 3githubgithub.com/arttnba3/CVE-2016-5195★ 3githubgithub.com/DanielEbert/CVE-2016-5195★ 2githubgithub.com/LiEnby/PSSRoot★ 2githubgithub.com/FloridSleeves/os-experiment-4★ 2githubgithub.com/Mr-Ochobot/CVE-2016-5195★ 2githubgithub.com/titanhp/Dirty-COW-CVE-2016-5195-Testing★ 1githubgithub.com/TotallyNotAHaxxer/CVE-2016-5195★ 1githubgithub.com/arbll/dirtycow★ 1githubgithub.com/0x3n19m4/CVE-2016-5195★ 1githubgithub.com/cbry-96/Dirty-Cow-Ubuntu-Server-16.04.1★ 1githubgithub.com/ASRTeam/CVE-2016-5195★ 1githubgithub.com/th3-5had0w/DirtyCOW-PoC★ 1githubgithub.com/malinthag62/The-exploitation-of-Dirty-Cow-CVE-2016-5195★ 1githubgithub.com/h1n4mx0/Research-CVE-2016-5195★ 0githubgithub.com/pardhu045/linux-privilege-escalation★ 0githubgithub.com/elhaddadalaa788-alt/kernel-exploit-dirtycow-project-subm★ 0githubgithub.com/KongQBin/CVE-2016-5195★ 0githubgithub.com/bL8nCO/Dirty-cow★ 0githubgithub.com/ndobson/inspec_CVE-2016-5195★ 0githubgithub.com/acidburnmi/CVE-2016-5195-master★ 0githubgithub.com/xpcmdshell/derpyc0w★ 0githubgithub.com/dulanjaya23/Dirty-Cow-CVE-2016-5195-★ 0githubgithub.com/KosukeShimofuji/CVE-2016-5195★ 0githubgithub.com/ldenevi/CVE-2016-5195★ 0githubgithub.com/KasunPriyashan/Y2S1-Project-Linux-Exploitaion-using-CVE-2016-5195-Vulnerability★ 0githubgithub.com/vinspiert/scumjrs★ 0githubgithub.com/passionchenjianyegmail8/scumjrs★ 0githubgithub.com/ramahmdr/dirtycow★ 0githubgithub.com/GonzaBot/kernel-exploit-dirtycow★ 0githubgithub.com/endgtryna/lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195★ 0githubgithub.com/istenrot/centos-dirty-cow-ansible★ 0githubgithub.com/sribaba/android-CVE-2016-5195★ 0githubgithub.com/ASUKA39/CVE-2016-5195★ 0githubgithub.com/rauljvc8/Exploit-Dirty-Cow★ 0githubgithub.com/Minime794/CVE-2016-5195★ 0githubgithub.com/voidgguy/lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195★ 0githubgithub.com/zakariamaaraki/Dirty-COW-CVE-2016-5195-★ 0githubgithub.com/shanuka-ashen/Dirty-Cow-Explanation-CVE-2016-5195-★ 0githubgithub.com/KaviDk/dirtyCow★ 0githubgithub.com/fei9747/CVE-2016-5195★ 0githubgithub.com/h1n4mx0z/Research-CVE-2016-5195★ 0githubgithub.com/EDLLT/CVE-2016-5195-master★ 0githubgithub.com/ZhiQiAnSecFork/DirtyCOW_CVE-2016-5195★ 0githubgithub.com/sakilahamed/Linux-Kernel-Exploit-LAB★ 0githubgithub.com/Samuel-G3/Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow★ 0githubgithub.com/mohammadamin382/dirtycow-lab★ 0githubgithub.com/MarioAlejos-Cs/dirtycow-lab★ 0githubgithub.com/theo543/OSDS_Paper_CVE-2016-5195★ 0githubgithub.com/vudangducminh/CVE-2016-5195★ 0githubgithub.com/maur0amaya/Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow★ 0githubgithub.com/1equeneRise/scumjr9★ 0githubgithub.com/gogooma125732/CVE-2016-5195★ 0githubgithub.com/AlonsoJuan1994/Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow★ 0vulncheckvulncheck.com/xdb/277a1d4bf8a2no verificadovulncheckvulncheck.com/xdb/26aa72694109no verificadovulncheckvulncheck.com/xdb/a84cc3ab3f48no verificadovulncheckvulncheck.com/xdb/0eca479a0f12no verificadovulncheckvulncheck.com/xdb/5a4311b57888no verificadovulncheckvulncheck.com/xdb/0f54259ef0a3no verificadovulncheckvulncheck.com/xdb/c702394e39a9no verificadovulncheckvulncheck.com/xdb/9ab30651140cno verificadovulncheckvulncheck.com/xdb/cd262e482af1no verificadovulncheckvulncheck.com/xdb/2f99e74166aeno verificadovulncheckvulncheck.com/xdb/3c59fbbe4941no verificadovulncheckvulncheck.com/xdb/b05a18448174no verificadovulncheckvulncheck.com/xdb/f2204b41dd21no verificadovulncheckvulncheck.com/xdb/b81caecd21a0no verificadovulncheckvulncheck.com/xdb/5c3c3322474dno verificadovulncheckvulncheck.com/xdb/9125928f7603no verificadovulncheckvulncheck.com/xdb/31a0aa69cf4cno verificadovulncheckvulncheck.com/xdb/cecbca9ee49fno verificadovulncheckvulncheck.com/xdb/db0cfa39ee2eno verificadovulncheckvulncheck.com/xdb/d1c17c081d03no verificadovulncheckvulncheck.com/xdb/94c11c970613no verificadovulncheckvulncheck.com/xdb/4d43856ec877no verificadovulncheckvulncheck.com/xdb/bbdb7a7979dano verificadovulncheckvulncheck.com/xdb/3259770b0ff4no verificadovulncheckvulncheck.com/xdb/4275f34a5224no verificadovulncheckvulncheck.com/xdb/91934bafa64fno verificadovulncheckvulncheck.com/xdb/9fe4e31741bfno verificadovulncheckvulncheck.com/xdb/6b7028face39no verificadovulncheckvulncheck.com/xdb/bbc108f0e2d3no verificadovulncheckvulncheck.com/xdb/a73a45d1e2d2no verificadovulncheckvulncheck.com/xdb/01d749b64ad1no verificadovulncheckvulncheck.com/xdb/a87c371b3f3fno verificadovulncheckvulncheck.com/xdb/72416db5c445no verificadovulncheckvulncheck.com/xdb/25a7d419158eno verificadovulncheckvulncheck.com/xdb/52f1724c803ano verificadovulncheckvulncheck.com/xdb/56a0d9175e82no verificadovulncheckvulncheck.com/xdb/770693b60910no verificadovulncheckvulncheck.com/xdb/8caaebd2c120no verificadovulncheckvulncheck.com/xdb/18b29d667585no verificadovulncheckvulncheck.com/xdb/77f940bbe0a4no verificadovulncheckvulncheck.com/xdb/421bc3afa1a0no verificadovulncheckvulncheck.com/xdb/177f3ff1c724no verificadovulncheckvulncheck.com/xdb/f9efe15626b2no verificadovulncheckvulncheck.com/xdb/e26232ee0a29no verificadovulncheckvulncheck.com/xdb/996eaef54533no verificadovulncheckvulncheck.com/xdb/5a7f805e6da3no verificadocve_referencepacketstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.htmlno verificadovulncheckvulncheck.com/xdb/edf32f0cb046no verificadovulncheckvulncheck.com/xdb/5b410bd6e523no verificadovulncheckvulncheck.com/xdb/81ccebeaeb88no verificadovulncheckvulncheck.com/xdb/6d5493a58df4no verificadocve_referencewww.exploit-db.com/exploits/40847/no verificadocve_referencepacketstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.htmlno verificadocve_referencepacketstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.htmlno verificadocve_referencewww.exploit-db.com/exploits/40611/no verificadocve_referencewww.exploit-db.com/exploits/40616/no verificadocve_referencewww.exploit-db.com/exploits/40839/no verificadocve_referencepacketstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.htmlno verificadocve_referencepacketstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.htmlno verificadovulncheckvulncheck.com/xdb/2cc6d2dfce04no verificadovulncheckvulncheck.com/xdb/3d9b8666395cno verificadovulncheckvulncheck.com/xdb/daafa674a454no verificadovulncheckvulncheck.com/xdb/7efc4e84a8f3no verificadocve_referencepacketstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.htmlno verificadovulncheckvulncheck.com/xdb/26759f64e421no verificadovulncheckvulncheck.com/xdb/10e422584e38no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.