Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ARMv6 CVE-2021-21974 #6

Open
shayls6 opened this issue Apr 15, 2022 · 0 comments
Open

ARMv6 CVE-2021-21974 #6

shayls6 opened this issue Apr 15, 2022 · 0 comments

Comments

@shayls6
Copy link

shayls6 commented Apr 15, 2022

Is this POC avaible for ArmV6? Because It's crashing on Client-8 service request I think 0x140 wrong on request 9 for ArmV6

[SLP Client-1] connect
[SLP Client-1] directory agent advertisement
[SLP Client-1] recv: b''
[SLP Client-2] connect
[SLP Client-3] connect
[SLP Client-4] connect
[SLP Client-5] connect
[SLP Client-2] service request
[SLP Client-2] recv: b'\x02\x02\x00\x00\x14\x00\x00\x00\x00\x00\x00\x05\x00\x02en\x00\x05\x00\x00'
[SLP Client-3] service request
[SLP Client-3] recv: b'\x02\x02\x00\x00\x14\x00\x00\x00\x00\x00\x00\x05\x00\x02en\x00\x05\x00\x00'
[SLP Client-4] service request
[SLP Client-4] recv: b'\x02\x02\x00\x00\x14\x00\x00\x00\x00\x00\x00\x05\x00\x02en\x00\x05\x00\x00'
[SLP Client-5] service request
[SLP Client-5] recv: b'\x02\x02\x00\x00\x14\x00\x00\x00\x00\x00\x00\x05\x00\x02en\x00\x05\x00\x00'
[SLP Client-6] connect
[SLP Client-6] service request
[SLP Client-6] recv: b'\x02\x02\x00\x00\x14\x00\x00\x00\x00\x00\x00\x05\x00\x02en\x00\x05\x00\x00'
[SLP Client-7] connect
[SLP Client-8] connect
[SLP Client-6] close
[SLP Client-9] connect
[SLP Client-9] directory agent advertisement
[SLP Client-9] recv: b''
[SLP Client-8] service request
[SLP Client-8] recv: b''
[SLP Client-7] service registration
[SLP Client-7] recv: b''
[SLP Client-8] service request
Exception in thread Thread-8:
Traceback (most recent call last):
File "/usr/lib/python3.7/threading.py", line 917, in _bootstrap_inner
self.run()
File "CVE-2021-21974.py", line 63, in run
s.send(outgoing)
BrokenPipeError: [Errno 32] Broken pipe

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant