Skip to content

POC for CVE-2023-46442 Denial of Service vulnerability found within Soot

Notifications You must be signed in to change notification settings

JAckLosingHeart/CVE-2023-46442_POC

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 

Repository files navigation

CVE-2023-46442_POC

Environment: Java 8

POC for CVE-2023-46442, Denial of Service vulnerability found within Soot before 4.4.1 under Java 8

When retrieving the body of a maliciously crafted method, a very small size class file or method can cause

huge resource consumption and loop forever until a OutOfMemory is reached(depending on JVM settings)

src/main/java/POC.java -> example vulnerable program

src/main/resources/Build$Builder.class -> example class file that can cause DoS/Indefinte loop(attack payload)

About

POC for CVE-2023-46442 Denial of Service vulnerability found within Soot

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages