CVE-2018-1002105 2

Vulnerability (CVE)

Demystifying Kubernetes CVE-2018-1002105 (and a dead simple exploit)

Kubernetes maintainers disclosed CVE-2018-1002105, a critical flaw in the kube-apiserver's UpgradeAwareHandler that lets an attacker who can send one authorized request keep sending arbitrary requests over the same connection, authenticated with the API...

Cloud Security

Finding unhandled errors using CodeQL

Cyber Risks Trail of Bits Blog

Trail of Bits used CodeQL variant analysis to hunt unhandled error codes in a Windows/Visual Studio codebase, starting from a custom error type called CustomErrorType and building a query that flags call sites where the returned error never taints a...

Vulnerabilities & Patching