4 ms·
So: 1) this is probably bullshit. cf. http://seclists.org/oss-sec/2014/q2/247 http://seclists.org/oss-sec/2014/q2/247 2) from the memory dump, it looks like i
by djmdjm 12y ago
So:
1) this is probably bullshit. cf. http://seclists.org/oss-sec/2014/q2/247 http://seclists.org/oss-sec/2014/q2/247
2) from the memory dump, it looks like it is post-authentication so the impact would be quite limited (stealing the password hash of an account one already has access to)
3) we're (OpenSSH) going to check it out anyway
- jacquesm 12y agoKudos for playing it safe, this does open you up to the possibility of being DOS'd with fake vulnerabilities whilst exploiting a real one.