Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Chrysalis]

Link to a video here explaining it.

https://www.youtube.com/watch?v=qhQRSUYnVG4

The CVE is CVE-2024-38063.

A lot of people including Microsoft are suggesting disabling IPv6 for now.  Although there is a patch available.

I haven't been able to discover if this can be exploited with all inbound IPv6 blocked on an external firewall device, or if it is exploitable via traffic initiated from the Windows client.  Blocking on a Windows firewall is confirmed not sufficient though as the packets are already being processed by Windows at that point.

[Alex Atkin UK]

He suggested in the video that incoming being blocked by default should prevent it.

Although he also failed to explain what he meant by "disabling IPv6" despite suggesting this multiple times.  IMO he means disabling it on the router, not in Windows as I believe Windows expects IPv6, even if its simply via Turedo.

I think even today, a lot of problems people have when browsing can be IPv6 related as many ISPs run their IPv6 more as an afterthought.  I'm thinking especially in the US where my friend had IPv6 enabled by AT&T and they had to send someone out to disable it on his router as it plain didn't work reliably.

I still only have IPv6 on its own VLAN which primarily is used by my home server.  I just don't see any benefits in using it generally.

[Chrysalis]

Ok thats good then, I am not great at absorbing info from videos, prefer a wall of text.

[Alex Atkin UK]

I don't think even he was 100% sure as the person who found the flaw wont give out the details of how it works, for obvious reasons.