News for hackers. Stuff that matters.

A comment on Remote execution bug in BSD ping.

Re:Remote execution bug in BSD ping by kloch on Wednesday November 30, 2022 @12:08PM (#33803757)
Does this require a user to be executing ping while a remote attacker sends a flood of exploit packets? Or is the OS always vulnerable? The article was not clear on this point.
[ Parent | on HN ]
Re:Remote execution bug in BSD ping by jdsnape on Wednesday November 30, 2022 @12:31PM (#33804199)
The former I believe
[ Parent | on HN ]
Re:Remote execution bug in BSD ping by tinus_hn on Thursday December 01, 2022 @03:09AM (#33813622)
The user uses the command to ping the attacker and the attacker returns a manipulated packet. Sounds far-fetched but there might be services that allow you to check if pings from the internet can reach you.
[ Parent | on HN ]