3 ms·
A response to the report [1] noted: > This attack works regardless of if you have a VPN or not. The attacker just needs to be able to send packets to the other
by pkilgore 7y ago
A response to the report [1] noted:
> This attack works regardless of if you have a VPN or not. The attacker just needs to be able to send packets to the other host. It's not systemd specific.
[1] https://seclists.org/oss-sec/2019/q4/123 https://seclists.org/oss-sec/2019/q4/123
- chapium 7y ago> Most of the Linux distributions we tested were vulnerable, especially Linux distributions that use a version of systemd pulled after November 28th of last year which turned reverse path filtering off. However, we recently discovered that the attack also works against IPv6, so turning reverse path filtering on isn't a reasonable solution, but this was how we discovered that the attack worked on Linux.