New week new exploits.
Enjoy the week. We'll see major tech breaking. Crypto relatively safe. Web2 systems first.
In the coming days you’ll see more exploits:
BIND 9 - Remote Code Execution Vulnerability
- Memory corruption: Replaying previously signed GSS-TSIG UDP messages can corrupt memory in
- BIND's named process.
- RCE: An attacker could potentially execute arbitrary code on a vulnerable DNS server.
- Attack complexity: High. Exploitation requires capturing a valid signed message, replaying it while the key remains valid, and sending crafted DNS queries.
No known active exploitation: ISC explicitly states it is unaware of active exploits.
No known workaround: Upgrading is the recommended solution.
Cobol, pyhton, 30-40 more to come in next weeks be ready and enjoy the show