Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

About Ubuntu 14.04 or 16.04 without tcache. #1

Closed
greg-workspace opened this issue Mar 23, 2021 · 1 comment
Closed

About Ubuntu 14.04 or 16.04 without tcache. #1

greg-workspace opened this issue Mar 23, 2021 · 1 comment

Comments

@greg-workspace
Copy link

greg-workspace commented Mar 23, 2021

In the exploit code: exploit_nss_u14.py or exploit_nss_u16.py, you wrote "the glibc with tcache" in the beginning comment. However, In the README.md, you wrote "For Linux distribution that glibc has no tcache support". Which one is typo? By the way, can you tell me the glibc version that you tested of Ubuntu 14.04 and 16.04? Thanks for your sharing.

#!/usr/bin/python
'''
Exploit for CVE-2021-3156 on Ubuntu 16.04 by sleepya
This exploit requires:
- glibc with tcache
For Linux distribution that glibc has no tcache support:

if a target is Debian 9, Ubuntu 16.04, or Ubuntu 14.04, try exploit_nss_xxx.py for specific version first
@worawit
Copy link
Owner

worawit commented Mar 23, 2021

Fixed. Thanks for reporting.
They are old glibc so no tcache. I cannot rememver exact version.

You can get glibc version from "ldd --version" command.
You can also check glibc version from distrowatch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants