CVE-2022-0324 PoC — Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)

Source

https://github.com/ngtuonghung/CVE-2022-0324

Associated Vulnerability

Title: Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC) (CVE-2022-0324)
Description:There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown. Discovered by Eugene Lim of GovTech Singapore.

Description

PoC for CVE-2022-0324: Buffer Overflow in dhcp6relay of SONiC

Readme

# cve-2022-0324

https://ngtuonghung.github.io/blog/research/cve-2022-0324/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →