News for hackers. Stuff that matters.

A comment on RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems.

Re:RegreSSHion: RCE in OpenSSH's server, on glibc-based Linu... by djmdjm on Monday July 01, 2024 @04:56AM (#40843865)
OpenSSH release notes: https://www.openssh.com/txt/release-9.8

Minimal patches for those can't/don't want to upgrade: https://marc.info/?l=oss-security&m=171982317624594&w=2

[ Parent | on HN ]
Re:RegreSSHion: RCE in OpenSSH's server, on glibc-based Linu... by morsch on Monday July 01, 2024 @05:07AM (#40843921)
> Exploitation on 64-bit systems is believed to be possible but has not been demonstrated at this time.
[ Parent | on HN ]
Re:RegreSSHion: RCE in OpenSSH's server, on glibc-based Linu... by aaronmdjones on Monday July 01, 2024 @06:32AM (#40844411)
Exploits only ever get better. Today's possible is next month's done.
[ Parent | on HN ]
Re:RegreSSHion: RCE in OpenSSH's server, on glibc-based Linu... by djmdjm on Monday July 01, 2024 @05:23AM (#40844022)
I'm confident that someone will make a workable exploit against 64-bit systems.
[ Parent | on HN ]
Re:RegreSSHion: RCE in OpenSSH's server, on glibc-based Linu... by runjake on Monday July 01, 2024 @12:04PM (#40847120)
Context here: djmdjm is Daniel Miller, an OpenSSH/OpenBSD developer.
[ Parent | on HN ]
Re:RegreSSHion: RCE in OpenSSH's server, on glibc-based Linu... by l9i on Monday July 01, 2024 @04:16PM (#40850167)
Damien Miller
[ Parent | on HN ]