alt Hacker NewsGo is everywhere in server environment. It's absurd to claim that multipath is not used that much. Maybe it's me, but go literally everywhere around me.
Also this vulnerability is not strictly about mptcp, although the exploitability is not clear.
Replies
wtch98 • yesterday at 9:39 PM
No this vulnerability is about IP Options, not MPTCP.
But they have very valid point: a CVE 10.0 with root RCE on twenty internal servers is lower risk than one vulnerable internet-facing server. All need to be patched, but the one on the Internet is your critical risk, the others are medium at worse.