alt Hacker NewsLooking at the technical deep dive further down the article, this is worse than Log4Shell if you need a point of reference. It's one of the two worst exploits that ever publicly surfaced, up there with EternalBlue.
Looking at the technical deep dive further down the article, this is worse than Log4Shell if you need a point of reference. It's one of the two worst exploits that ever publicly surfaced, up there with EternalBlue.
How reliably exploitable is it, if you know? EternalBlue was fairly close to a point-and-click exploit iirc, the early PoCs I’ve seen for this so far pin things for specific builds/images/configs, one consuming asan output, etc.