Hacker News new | ask | show | jobs
by black_puppydog 1564 days ago
How so? If I find a vector that triggers the remote system to `cat /dev/random | netcat $target` then there's no limit for how much traffic my refelection generates, no?
2 comments

I assume by limit OP means the remote system's bandwidth.

at 4 billion to 1, there's in practice very little difference between CVE-2022-26143 and what you describe. Both will be capped at the same number by the bandwidth available to the offending system.

look at the binary, it's an overflow value. Like it didn't fit the spreadsheet.