Post

Marcus Hutchins
@malwaretech.com

I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.

39 reposts347 likes

SocPup
@socpup.com

If a single packet can crash a firewall it is probably not a firewall issue, but different layer issue, like OS, network implementation or something else. Then again, have seen some weird "firewalls" out there where packets are parsed directly. But, probably isn't science 😂 when are you publishing?

Matt
@mattmark.bsky.social

Oh, great. New SYN-flood type of attacks, just reset their box? Hm, where can I try this PoC because I want to see if it hits my environment as demo'd.