Episode 180 - A Tale of Two Vulnerabilities

Josh and Kurt talk about two recent vulnerabilities that have had very different outcomes. One was the Citrix remote code execution flaw. While the flaw is bad, the handling of the flaw was possibly worse than the flaw itself. The other was the Microsoft ECC encryption flaw. It was well handled even though it was hard to understand and it is a pretty big deal. As all these things go, fixing and disclosing vulnerabilities is hard. Show Notes Microsoft flaw CVE-2020-0601 Citrix flaw CVE-2019-19781 Citrix mitigation instructions

Episode metadata supplied by the publisher feed · Published Jan 27, 2020

Embed this episode

Attribution link and audio player

Ready to play

Episode 180 - A Tale of Two Vulnerabilities

0:00 31:07

1×

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

No similar episodes found.

Similar Podcasts

The Red Room Redacted Information Security The show where red team stories from around the world are explored by the guys at Redacted Information Security, and new techniques and tools are pulled apart and discussed. Explicit

Frequently Asked Questions

How long is this episode of Open Source Security?

This episode is 31 minutes long.

When was this Open Source Security episode published?

This episode was published on January 27, 2020.

Can I download this Open Source Security episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.

URL copied to clipboard!