├── CVE-2016-5610 ├── 32-bit-exploit │ ├── Makefile │ ├── README.md │ ├── address.h │ ├── dhcp-client.c │ ├── dhcp-client.h │ └── exploit.c ├── 64-bit-rip-control │ ├── Makefile │ ├── README.md │ ├── address.h │ ├── critsect.h │ ├── dhcp-client.c │ ├── dhcp-client.h │ └── poc.c └── 64-bit-wo-libpcap │ ├── Makefile │ ├── README.md │ ├── address.h │ ├── critsect.h │ ├── dhcp-client.h │ └── poc.c ├── CVE-2016-5611 ├── Makefile ├── dhcp-client.c ├── dhcp-client.h └── poc.c └── README.md /CVE-2016-5610/32-bit-exploit/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/32-bit-exploit/Makefile -------------------------------------------------------------------------------- /CVE-2016-5610/32-bit-exploit/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/32-bit-exploit/README.md -------------------------------------------------------------------------------- /CVE-2016-5610/32-bit-exploit/address.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/32-bit-exploit/address.h -------------------------------------------------------------------------------- /CVE-2016-5610/32-bit-exploit/dhcp-client.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/32-bit-exploit/dhcp-client.c -------------------------------------------------------------------------------- /CVE-2016-5610/32-bit-exploit/dhcp-client.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/32-bit-exploit/dhcp-client.h -------------------------------------------------------------------------------- /CVE-2016-5610/32-bit-exploit/exploit.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/32-bit-exploit/exploit.c -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-rip-control/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-rip-control/Makefile -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-rip-control/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-rip-control/README.md -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-rip-control/address.h: -------------------------------------------------------------------------------- 1 | uint64_t ret = 0x00400e91; 2 | -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-rip-control/critsect.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-rip-control/critsect.h -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-rip-control/dhcp-client.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-rip-control/dhcp-client.c -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-rip-control/dhcp-client.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-rip-control/dhcp-client.h -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-rip-control/poc.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-rip-control/poc.c -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-wo-libpcap/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-wo-libpcap/Makefile -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-wo-libpcap/README.md: -------------------------------------------------------------------------------- 1 | PoC to trigger the bug from an unprivileged guest user 2 | -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-wo-libpcap/address.h: -------------------------------------------------------------------------------- 1 | uint64_t ret = 0x00400e91; 2 | -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-wo-libpcap/critsect.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-wo-libpcap/critsect.h -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-wo-libpcap/dhcp-client.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-wo-libpcap/dhcp-client.h -------------------------------------------------------------------------------- /CVE-2016-5610/64-bit-wo-libpcap/poc.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5610/64-bit-wo-libpcap/poc.c -------------------------------------------------------------------------------- /CVE-2016-5611/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5611/Makefile -------------------------------------------------------------------------------- /CVE-2016-5611/dhcp-client.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5611/dhcp-client.c -------------------------------------------------------------------------------- /CVE-2016-5611/dhcp-client.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5611/dhcp-client.h -------------------------------------------------------------------------------- /CVE-2016-5611/poc.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/renorobert/virtualbox-nat-dhcp-bugs/HEAD/CVE-2016-5611/poc.c -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # virtualbox-nat-dhcp-bugs --------------------------------------------------------------------------------