Cyber Risks · Cisco Talos

Vulnerability Spotlight: Epee Levin Packet Deserialization Code Execution Vulnerability

Summary: Cisco Talos disclosed an Epee Levin packet deserialization code execution vulnerability in Monero 'Lithium Luna', tested on version v0.12.2.0-master-ffab6700, and worked with the project's developers under its coordinated disclosure policy to resolve the issues and release an update. Snort rule 47342 covers the vulnerability.

What's compelling: A code execution flaw in a cryptocurrency client's packet handling is reachable by anyone who can send it crafted traffic, and the fix only protects users who apply the update.

Read the original at Cisco Talos ↗

Topics
Cloud Security
Related