google / security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

Home Page:https://www.google.com/about/appsecurity/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Troubleshooting

Github-By-G opened this issue · comments

I'm working on "CVE-2023-22098, CVE-2023-22099, CVE-2023-22100", in which I am testing this "CVE-2023-22098" repo and setting up the environment;

image

however, i'm unable to open the calculator after running "insmod exploit .ko"

payload_error

Also i've tried :

  • change the char calc[] = "/home/a.sh/"; ( where this creates a simple a.txt file) - not working
  • Disable ASLR & apparmor - not working
  • used demsg - there's no error's demsg.txt

my env: ubuntu 22.04(host machine) >> Vbox 7.0.10v >>ubuntu 20.04(vm)


  1. Just wanted to know about other vuln : CVE-2023-22099, CVE-2023-22100

Do "rmmod virtio_net" before and it should work.

Here the output: still not opening anything:
saying virtio_net is not loaded
even i tried to check with htop, see if it running in background

image

--
Also can you please specifiy the : versions setup of host and vm guest ; im thinking it might related to version issues

Are you using the virtio-net network adapter in VirtualBox?

Nop, using NAT:

image

Then obviously it doesn't work. This vulnerability affects the virtio-net device.

thank you mr.Andy i got it, it is working

and if possible mention this on git aswell


And can you please provide any info about other two vuln : CVE-2023-22099, CVE-2023-22100 ???
just wanted to know about them