Exploit / PoChigh
elasticsearch Vuln Abuse on Amazon Cloud and More for DDoS and Profit
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-0196 | Race Condition in Linux Kernel TTY (n_tty_write) Allows Local Privilege Escalation | — | 20% | KEV | — KEV |
| CVE-2014-3120 | Remote Code Execution via Dynamic Scripting in Elasticsearch (CVE-2014-3120) | — | 89% | KEV | — KEV |
From the original article
3 min read at securelist.com
A couple weeks ago, my colleague Mikhail K posted on the “ Versatile DDoS Trojan for Linux “, with analysis of several bots, including a bot implementing some extraordinary DNS amplification DDoS functionality. Operators of these bots are currently active, and we observe new variants of the trojan building bigger botnets.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.