CVE-2024-42861 PoC — IEEE 802.1AS 安全漏洞

Source

https://github.com/qiupy123/CVE-2024-42861

Associated Vulnerability

Title:IEEE 802.1AS 安全漏洞 (CVE-2024-42861)
Description:An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted Pdelay_Req message to the time synchronization function

Description

the

Readme

# CVE-2024-42861
The DOS attack against IEEE 802.1AS standard(gPTP protocol)<br><br>
[CVE ID]<br>
CVE-2024-42861<br><br>
[PRODUCT]<br>
IEEE 802.1AS standard<br><br>
[VERSION]<br>
IEEE 802.1AS-2020, IEEE 802.1AS-2010<br><br>
[PROBLEM]<br>
DOS attack<br><br>
[DESCRIPTION]<br>
When a port of a device with IEEE 802.1AS enabled receives two Pdelay_Req messages with different clockID, the time synchronization function of that port becomes disabled, leading to a denial of service attack.Attacker and the target are on the same Ethernet network. The attacker sends two Pdelay_Req messages with different ClockID to the target. Upon receiving these messages, the target's port will automatically terminate clock synchronization communication with the peer port, rendering the clock synchronization function of that port unavailable for a certain period of time. This DOS attack was successfully reproduced on linuxPTP(a software that implemnets the ptp and gptp protocols).

File Snapshot


 [4.0K]  /data/pocs/5abdb599703d9380e4cde796ace7574ec1c95cd2
└── [ 970]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!