Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NT OS Kernel Information Disclosure Vulnerability

crowdfense.com

Post reply on HN
Print view View original

1–10 of 37 posts

Re: NT OS Kernel Information Disclosure Vulnerability

#3

Post by Jare »

I went to check when the bug had been patched, and was left wanting. I however lack the expertise to really appreciate how much danger exists in practice, or for whom. I just know I do have Win11 24H2 and "This leak primitive is particularly useful for Windows versions 24H2 or later"

Re: NT OS Kernel Information Disclosure Vulnerability

#4

Post by [deleted] »

Jare wrote: post #3

I went to check when the bug had been patched, and was left wanting. I however lack the expertise to really appreciate how much danger exists in practice, or for whom. I just know I do have Win11 24H2 and "This leak primitive is particularly useful for Windows versions 24H2 or later"

[deleted]

Re: NT OS Kernel Information Disclosure Vulnerability

#5

Post by Ethee »

Jare wrote: post #3

I went to check when the bug had been patched, and was left wanting. I however lack the expertise to really appreciate how much danger exists in practice, or for whom. I just know I do have Win11 24H2 and "This leak primitive is particularly useful for Windows versions 24H2 or later"

If you follow the CVE link included: https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...

It would seem this was patched in the Aug 12 security patch rollout.

Re: NT OS Kernel Information Disclosure Vulnerability

#7

Post by MattSteelblade »

Jare wrote: post #3

I went to check when the bug had been patched, and was left wanting. I however lack the expertise to really appreciate how much danger exists in practice, or for whom. I just know I do have Win11 24H2 and "This leak primitive is particularly useful for Windows versions 24H2 or later"

This type of exploit is useful as part of a chain of exploits; it defeats a defense-in-depth protection.

Re: NT OS Kernel Information Disclosure Vulnerability

#9

Post by btreecat »

KyleBerezin wrote: post #8

I find myself thinking "wow, what an obvious bug. How did Microsoft not catch that?" but then I think back to some of my own extremely obvious bugs. Thankfully my code is much lower impact.

I still think of the lessons learned from a root traverse bug I accidentally coded into one of our internal apps as a jr dev.

You could change the URL of the image, and get any file off the system to download as long as the service account had read access.

Invaluable XP, and really glad everything was behind AD authentication and internal users were trustworthy enough and operating in a network isolated context.

Post reply on HN