{"uuid": "99c50713-0b75-4465-84ae-cbb0e766c8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-38063", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrewz/3935", "content": "ed to download proof-of-concept script from github.com\n\n\n\n\nkali> git clone https://github.com/ynwarcs/CVE-2024-38063.git\n\n\n\n\nNext, navigate to the new directory, script.\n\n\n\n\nkali> cd script\n\n\n\n\nThen, install scapy using pip3.\n\n\n\n\nkali> pip3 install scapy\n\n\n\n\nStep 2: Prepare the Script\n\n\n\n\nOpen the script and modify the following fields:\n\n\n\n\n* \niface: Specify the network interface to use (e.g., \"eth0\" or \"wlan0\" on Linux).\n\n* \nip_addr: Set the IPv6 address of the target system.\n\n* \nnum_tries and num_batches: Adjust these to control the number of packet batches sent.\n\n* \nmac_addr: Leave empty unless Scapy can't find the MAC address automatically.\n\n\n\n\n\nHere's an example of how your configured script might look:\n\n\n\n\niface='eth0'\n\nip_addr='1234:1234:1234'\n\nmac_addr=''\n\nnum_tries=20\n\nnum_batches=20\n\n\n\n\nStep 3: Run the Exploit\n\n\n\n\nThe script will send multiple packets to exploit the vulnerability, including an IPv6 packet with a malformed \"destination options\" extension header. It will also send an IPv6 fragment # 1, potentially concatenated with the first packet, followed by an IPv6 fragment # 2 (with the same ID) to complete the second fragment.\n\n\n\n\nThe script attempts to trigger multiple corruptions to increase the chance of a crash. Wait for about a minute to allow \u201cIpv6pReassemblyTimeout\u201d to be triggered. As a result, the system will be disrupted.\n\n\n\n\nThe exploit will not work under all circumstances, as is the case with any exploit. \n\n\n\n\nFor troubleshooting, follow these steps: \n\n\n\n\nFirst, ensure IPv6 connectivity with \u201cping -6 {ipv6_address}\u201d from the host PC. Also, check whether your ISP supports IPv6.\n\n\n\n\nIf Scapy reports \"Mac address to reach destination not found,\" resolve MAC address issues by manually finding the target's MAC address. \n\n\n\n\nYou can use Wireshark or Scapy to obtain the MAC address and then add it to the \u201cmac_addr\u201d field in the script.\n\n\n\n\nFinally, address packet coalescing issues by modifying network adapter settings such as \"Packet Coalescing\" and \"Interrupt Moderation\".\n\n\n\n\nSummary\n\n\n\n\nCVE-2024-38063 is a serious vulnerability that affects Windows systems with IPv6 enabled. This article explains the details of a vulnerability and presents a proof of concept (PoC) that can cause a denial of service on unpatched Windows systems running IPv6. Its discovery underscores the importance of ongoing security research and the need for prompt patching. Patch your system immediately!", "creation_timestamp": "2024-09-03T22:43:46.000000Z"}