2 ms·

I saw the CVE mention RADVD, which took me here: https://github.com/radvd-project/radvd/commit/f67335b5335b6ed5ca68d6fa71c08cccb4f3a629 https://github.com/radvd

by wepple 3y ago

I saw the CVE mention RADVD, which took me here: https://github.com/radvd-project/radvd/commit/f67335b5335b6ed5ca68d6fa71c08cccb4f3a629 https://github.com/radvd-project/radvd/commit/f67335b5335b6e... So not Linux kernel but possibly RADVD. No announcement from RADVD itself

wepple 3y ago
Timeline here: https://www.zerodayinitiative.com/advisories/ZDI-23-710/ https://www.zerodayinitiative.com/advisories/ZDI-23-710/ ZDI have been doing disclosure since forever. I doubt Mikrotiks claim that they were never notified.
fulafel 3y ago
But this is supposed to be about the RA client, radvd is for sending them out.