AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges
Heap buffer overflow 'AnyPwn' in AnyDesk Linux 8.0.2 enables pre-approval remote code execution with root privileges, fixed in 8.0.3.
Security researcher Rick de Jager of V12 disclosed 'AnyPwn', a heap buffer overflow in AnyDesk Linux 8.0.2's mode-5 stream packet handler caused by 32-bit arithmetic truncation when computing allocation sizes. A PoC demonstrates root-level remote command execution before user approval of desktop control, via direct TCP connections to port 7070 on Linux x86_64. Exploitation combines heap spraying and ROP chains calling system(). Windows and macOS are unaffected; version 8.0.3 fixes the issue.
- Integer truncation in mode-5 stream packet handler of AnyDesk 8.0.2
- RCE with root privileges before user approves desktop control
- PoC via direct TCP port 7070; Windows and macOS unaffected
- Fixed in AnyDesk 8.0.3; restrict port 7070 as interim mitigation
- Organizations
- AnyDeskV12Rick de Jager
From the original article
2 min read at gbhackers.com
Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8. 0. 2, named AnyPwn.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.