Open Source Security

Episode 180 - A Tale of Two Vulnerabilities


Listen Later

Josh and Kurt talk about two recent vulnerabilities that have had very different outcomes. One was the Citrix remote code execution flaw. While the flaw is bad, the handling of the flaw was possibly worse than the flaw itself. The other was the Microsoft ECC encryption flaw. It was well handled even though it was hard to understand and it is a pretty big deal. As all these things go, fixing and disclosing vulnerabilities is hard.

Show Notes
  • Microsoft flaw CVE-2020-0601
  • Citrix flaw CVE-2019-19781
  • Citrix mitigation instructions
...more
View all episodesView all episodes
Download on the App Store

Open Source SecurityBy Josh Bressers

  • 4.7
  • 4.7
  • 4.7
  • 4.7
  • 4.7

4.7

40 ratings


More shows like Open Source Security

View all
Hacked by Hacked

Hacked

189 Listeners

The Changelog: Software Development, Open Source by Changelog Media

The Changelog: Software Development, Open Source

289 Listeners

Security Now (Audio) by TWiT

Security Now (Audio)

2,005 Listeners

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

369 Listeners

LINUX Unplugged by Jupiter Broadcasting

LINUX Unplugged

272 Listeners

Risky Business by Patrick Gray

Risky Business

374 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

649 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,035 Listeners

Late Night Linux by The Late Night Linux Family

Late Night Linux

168 Listeners

Smashing Security by Graham Cluley

Smashing Security

322 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,119 Listeners

Hacking Humans by N2K Networks

Hacking Humans

316 Listeners

Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

Defense in Depth

74 Listeners

2.5 Admins by The Late Night Linux Family

2.5 Admins

97 Listeners

Risky Bulletin by risky.biz

Risky Bulletin

44 Listeners