3 ms·
Exploits start against flaw that could hamstring huge swaths of Internet
- dimino 11y agoHere's a PoC I found on GitHub: https://github.com/robertdavidgraham/cve-2015-5477 https://github.com/robertdavidgraham/cve-2015-5477
- e28eta 11y agoThis is interesting too: https://www.isc.org/blogs/about-cve-2015-5477-an-error-in-handling-tkey-queries-can-cause-named-to-exit-with-a-require-assertion-failure/ https://www.isc.org/blogs/about-cve-2015-5477-an-error-in-ha... I'm curious to see how this will shake out. Have all the big players upgraded already? -Is there a way to weaponize the exploit, instead of just crashing the server?- Edit: I read the POC header comment, it says no.