3 ms·
Non exploitable crash can be a denial of service, given the right configuration. Ie, filling up disk core file storage, crashing at the right time can force ex
by ungamed 6y ago
Non exploitable crash can be a denial of service, given the right configuration. Ie, filling up disk core file storage, crashing at the right time can force expensive operations to retry/rollback.
- saagarjha 6y agoThis is exactly the attitude we’re talking about. Ok, if you do a bunch of things maybe it could make the service throw a disk usage warning email your way. But a service that is actually crashing now is obviously quite a bit more important.
- ungamed 6y agoNo, this is exactly the incorrect definition of the problem that vendors talking about. Crashing a single users thread on a web service is the definition of useless, its not annoying anyone but the attackers session.