3 ms·
This potentially impacts a ton of infrastructure machines that will be very difficult to patch.
by loydb 8y ago
This potentially impacts a ton of infrastructure machines that will be very difficult to patch.
- sova 8y agoTo me it seems that a patch would be like trying to put a band-aid on the brainstem for a concussion. These exploits run lower and can be triggered at any time with the appropriate instructions. Is it even possible to patch?
- sgillen 8y agoLooks like this feature has to at least be enabled somewhere for it to work (it just so happens that for some systems it is enabled by default). If that really is the case it might be possible to disable the system, as long as only something in layer 0 can turn it back on. Although yeah still not an ideal situation.
- sova 8y agoThanks for the clarification, good it's not on by default
- jimrandomh 8y agoGenerally speaking, local privilege escalation is not a problem for old infrastructure machines, because those machines don't run any third-party untrusted code.