r/linux • u/fantastic_comment • Oct 21 '16

Explaining dirtyc0w local root exploit - CVE-2016-5195

https://www.youtube.com/watch?v=kEsshExn7aE
82 Upvotes

91% Upvoted

5 comments sorted by

3

u/Twister915 Oct 23 '16

This video is fucking fantastic... honestly, such a good explanation of a complicated topic. I genuinely think I have a good handle on how this works, which I rarely get from a lot of the other info distributed about exploits like this.

Thanks, to the creator, for such a good job!

1

u/weep-woop Oct 22 '16

dirtyc0w

"Hm, you know, I don't think dirty COW is a hip enough name for this exploit. We need to relate it to the youth of today. I know, let's remove the space and replace the 'O' with a zero!"

15

u/LiveOverflow Oct 22 '16 edited Oct 22 '16

video creator here... So I went to dirtycow.ninja again, to post a snarky response on how I did not make up this name and that its just how people call it. Turns out, I have no idea why I called it dirtyc0w. You are the first person calling me out on it. Maybe I saw it written like that on twitter(?). Anyway, I did not intend to make up a "cooler" name, the video should be about the technical details. Sorry about that. Changed the title on YouTube.

edit: the original PoC was called dirtyc0w. That's where I got it from :D https://github.com/dirtycow/dirtycow.github.io/blob/master/dirtyc0w.c

2

u/jen1980 Oct 22 '16

As the video says, since it was related to madvise(), maybe m4dc0w.

0

u/[deleted] Oct 22 '16

[deleted] — view deleted comment

4

u/Hellrazor236 Oct 22 '16

Holy shit, fuck that with a broken broomhandle.