3 ms·
This is interesting too: https://www.isc.org/blogs/about-cve-2015-5477-an-error-in-handling-tkey-queries-can-cause-named-to-exit-with-a-require-assertion-failur
by e28eta 11y ago
This is interesting too: https://www.isc.org/blogs/about-cve-2015-5477-an-error-in-handling-tkey-queries-can-cause-named-to-exit-with-a-require-assertion-failure/ https://www.isc.org/blogs/about-cve-2015-5477-an-error-in-ha...
I'm curious to see how this will shake out. Have all the big players upgraded already?
-Is there a way to weaponize the exploit, instead of just crashing the server?-
Edit: I read the POC header comment, it says no.