CVE-2022-0324
HIGHSONiC DHCPv6 Relay - Remote Denial of Service via Malformed DHCPv6 Packet
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2022-0324. PoCs published by ngtuonghung.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2022-0324, a heap-based buffer overflow in the dhcp6relay component of SONiC (Software for Open Networking in the Cloud). The exploit sends a maliciously crafted DHCPv6 Relay-Reply packet with an oversized option length to trigger the vulnerability.
Description
There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown. Discovered by Eugene Lim of GovTech Singapore.
Exploits (1)
This repository contains a functional exploit for CVE-2022-0324, a heap-based buffer overflow in the dhcp6relay component of SONiC (Software for Open Networking in the Cloud). The exploit sends a maliciously crafted DHCPv6 Relay-Reply packet with an oversized option length to trigger the vulnerability.
References (2)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H