Initial Sequence Numbers News Today

The nine vulnerabilities affecting four popular TCP/ IP stacks (FreeBSD, Nucleus NET, IPnet and NetX) were revealed this week by researchers at Forescout in San Jose, Calif., and JSOF Research in Israel. Collectively the vulnerabilities are called Name:Wreck, which refers to how the parsing of domain names can break – “wreck” – DNS implementations in TCP/IP stacks, leading to denial of service or remote code execution attacks. TCP/IP stacks are the communications protocols used for orga...

Plus: SentinelOne picks up Scalyr, fatal flaws in TCP, and a view on Supermicro Share Copy In brief Internet Security Research Group nonprofit Lets Encrypt has massively upgraded its certification hardware and software so that it can delete and reissue all its certs in less than 24 hours. Last April the certificate authority was forced to kill three million HTTPS certs after a bug was found in its automated certificate management environment, about 2.6 per cent of its 150 million live c...

In total, 11 stacks were analyzed: uIP, FNET, picoTCP, Nut/Net, lwIP, cycloneTCP, uC/TCP-IP, MPLAB Net, TI-NDKTCPIP, Nanostack, and Nucleus NET. Millions of devices, including everything from IT file servers to IoT embedded components, use uIP, FNET, picoTCP and Nut/Net. Researchers found improperly generated ISNs in nine of the 11 stacks analyzed. Researchers said they disclosed the vulnerabilities to the affected vendors and maintainers in October 2020.  “Most vendors have already issued p...