Saturday, October 22, 2016

Dirty Cow (CVE-2016-5195)

Dirty Cow is a newly discovered, but already a decade aged,  vulnerability which is present in almost all Linux distributions including your likely favorite Kali Linux. 


It is referenced as CVE-2016-5195 and called Dirty Cow as it is a race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only memory mappings. An unprivileged local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their privileges on the system.(RedHat)


Solution:


Depending on your distribution, I think this vulnerability must have been fixed already. I will mention how to overcome it only on the latest Ubuntu release 16.04/10 LTS (check the bug) where new packages are released and the easiest way to get them is to update your sources.list file

sudo apt-get update

and then upgrade:

sudo apt-get dist-upgrade

Reboot your system so that the changes take effect.