Cybersecurity

5683 readers

21 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

Unauthenticated RCE vs all GNU/Linux systems to be fully disclosed in 2 weeks with no working fix yet (nitter.poast.org)

submitted 1 month ago* (last edited 1 month ago) by treasure@feddit.org to c/cybersecurity@sh.itjust.works

18 comments fedilink hide all child comments

EDIT: Original post seems to have been removed, try this Nitter mirror instead.

you are viewing a single comment's thread
view the rest of the comments

[–] bigkahuna1986@lemmy.ml 10 points 1 month ago (3 children)

Unauthenticed RCE vs all GNU/Linux systems

So this would probably be SSH related right? Otherwise what would all Linux systems have in common?

[–] mp3@lemmy.ca 15 points 1 month ago (2 children)

My bet is on Systemd.

[–] thesmokingman@programming.dev 5 points 1 month ago

That’s not all GNU/Linux though. Either the OP doesn’t understand a very common container OS, Alpine, doesn’t use systemd (also Void Linux and others outside the container space) or it’s something else.

[–] Luci@lemmy.ca 3 points 1 month ago (1 children)

Oh that would be baaaad

[–] knobbysideup@sh.itjust.works 4 points 1 month ago (1 children)

And unsurprising

[–] burgersc12@mander.xyz 4 points 1 month ago (1 children)

How would this be unsurprising? Is systemd known for this kind of thing or something?

[–] mp3@lemmy.ca 5 points 1 month ago

https://pwnies.com/systemd-bugs/

[–] CameronDev@programming.dev 5 points 1 month ago

Not all Linux's have SSH enabled, especially out of the box.

They have some other posts about IPv6 parsing (also not universal), but that doesnt sound like an "easy" RCE.

[–] schizo@forum.uncomfortable.business 4 points 1 month ago (1 children)

If it were SSH though, wouldn't that ALSO include a wider blast radius than just Linux systems?

Like OpenSSH is used all over the damn place, unless I guess there's something specific about the issue that limits it to Linux hosts for some reason?

[–] SpaceMan9000@lemmy.world 2 points 1 month ago

He claims the blast radius is bigger, not just Linux. He also claims to be in talks with Apple. So the educated guess would still be openssh