CVEs-PoC/2016/CVE-2016-2568.md

CVE-2016-2568

Description

pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

POC

Reference

• https://ubuntu.com/security/CVE-2016-2568

Github

• https://github.com/11notes/docker-github-runner
• https://github.com/ARPSyndicate/cvemon
• https://github.com/hartwork/antijack