2 ms·
Has anyone put together a POC that doesn't require re-pointing the system nameserver and crashing other applications?
by Gratsby 11y ago
Has anyone put together a POC that doesn't require re-pointing the system nameserver and crashing other applications?
- zwetan 11y agoI'm interested in that too
- arbruijn 11y agoYou can create a small chroot with a custom resolv.conf. Example (tested on Ubuntu 14.04 64-bit): mkdir -p root/lib/x86_64-linux-gnu root/lib64 root/etc cp -a --parents /lib/x86_64-linux-gnu/lib{c,nss,resolv}* root cp /lib64/ld-linux-x86-64.so.2 root/lib64 cp CVE-2015-7547-client root echo 'nameserver 127.0.0.1' > root/etc/resolv.conf sudo chroot root ./CVE-2015-7547-client If it prints nothing it crashed. Try running with strace to be sure.
- Gratsby 11y agoBrilliant. Thank you.