Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2015-8550

Description

Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.

POC

Reference

- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Github

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/Al1ex/LinuxEelvation

- https://github.com/HaxorSecInfec/autoroot.sh

- https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits

- https://github.com/a-roshbaik/Linux-Privilege-Escalation-Exploits

- https://github.com/bsauce/kernel-exploit-factory

- https://github.com/jfbastien/no-sane-compiler

- https://github.com/vlain1337/auto-lpe