CVE-2024-42861 PoC — IEEE 802.1AS 安全漏洞

Source

https://github.com/qiupy123/CVE-2024-42861

Associated Vulnerability

Title:IEEE 802.1AS 安全漏洞 (CVE-2024-42861)
Description:IEEE 802.1AS是IEEE组织的一种标准协议。 IEEE 802.1AS v.4.2版本及之前版本存在安全漏洞。远程攻击者通过向time synchronization函数发送特制的 Pdelay_Req 消息导致拒绝服务。

Description

the

Readme

# CVE-2024-42861
The DOS attack against IEEE 802.1AS standard(gPTP protocol)<br><br>
[CVE ID]<br>
CVE-2024-42861<br><br>
[PRODUCT]<br>
IEEE 802.1AS standard<br><br>
[VERSION]<br>
IEEE 802.1AS-2020, IEEE 802.1AS-2010<br><br>
[PROBLEM]<br>
DOS attack<br><br>
[DESCRIPTION]<br>
When a port of a device with IEEE 802.1AS enabled receives two Pdelay_Req messages with different clockID, the time synchronization function of that port becomes disabled, leading to a denial of service attack.Attacker and the target are on the same Ethernet network. The attacker sends two Pdelay_Req messages with different ClockID to the target. Upon receiving these messages, the target's port will automatically terminate clock synchronization communication with the peer port, rendering the clock synchronization function of that port unavailable for a certain period of time. This DOS attack was successfully reproduced on linuxPTP(a software that implemnets the ptp and gptp protocols).

File Snapshot


 [4.0K]  /data/pocs/5abdb599703d9380e4cde796ace7574ec1c95cd2
└── [ 970]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!