News for hackers. Stuff that matters.

A comment on OpenSSH Pre-Auth Double Free – CVE-2023-25136 – Writeup and Proof-of-Concept. Parent comment

Re:OpenSSH Pre-Auth Double Free – CVE-2023-25136 – Writeup a... by userbinator on Wednesday February 08, 2023 @03:48PM (#34714850)
You could just open the connections and let them sit without crashing the process. Then those processes and connections will actually be consuming resources instead of crashing and disappearing.
[ Parent | on HN ]
Re:OpenSSH Pre-Auth Double Free – CVE-2023-25136 – Writeup a... by mike_hock on Wednesday February 08, 2023 @05:23PM (#34716329)
... up to MaxStartups. The most important resource they'd be consuming would be the startup slots.
[ Parent | on HN ]
Re:OpenSSH Pre-Auth Double Free – CVE-2023-25136 – Writeup a... by acdha on Wednesday February 08, 2023 @06:11PM (#34716988)
How many resources does that use, however? I’m not sure anything but an embedded device would even notice any of these possibilities. The closest I could come is Ubuntu’s old crash reporter but I thought they hardened that a while back.
[ Parent | on HN ]