CVE-2019-16889-poc

Resource Consumption DOS on Edgemax v1.10.6 资源消耗拒绝服务攻击。此漏洞于去年被报告，并已在2.0.3版本中修复。其编号为CVE-2019-16889。 这是我第一次使用asyncio，如果您发现更高效的方法，请告诉我！ 参见以下链接： https://mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/ 本仓库已添加requirements.txt文件，因此执行'pip3 install -r requirements.txt'即可。...

CVE-2019-16889

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service disk consumption because .cache files in /var/run/beaker/containerfile/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The...

CVE-2019-16889

CVE-2019-16889 affects Ubiquiti EdgeMAX devices prior to firmware 2.0.3, where handling of the beaker.session.id cookie can trigger a denial-of-service (disk consumption). Specifically, a valid length payload (≤ 249 characters) in a sequence of unique session IDs causes creation of *.cache files ...