CVE-2022-46770
HIGHMirage Firewall 0.8.0-0.8.3 - Denial of Service via Crafted Multicast UDP Packet
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2022-46770.
PoCs published by Krzysztof Burghardt, including Metasploit module auxiliary/dos/mirageos/qubes_mirage_firewall_dos.
AI-analyzed exploit summary This exploit sends a UDP packet with a payload of 607 'a' characters to trigger a denial-of-service condition in qubes-mirage-firewall versions >= 0.8.0 & < 0.8.4. The vulnerability is exploited by sending malformed data to the multicast address 239.255.255.250 on port 5353.
Description
qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).
Exploits (2)
This exploit sends a UDP packet with a payload of 607 'a' characters to trigger a denial-of-service condition in qubes-mirage-firewall versions >= 0.8.0 & < 0.8.4. The vulnerability is exploited by sending malformed data to the multicast address 239.255.255.250 on port 5353.
This Metasploit module exploits a DoS vulnerability in Mirage firewall for QubesOS versions 0.8.0-0.8.3 by sending a randomly sized UDP packet to a target address and port, causing a service crash.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H