Negligent Employees And Their Vulnerability to Social Engineering
July 11, 2019Rewterz Threat Advisory – CVE-2019-10639 – Linux Kernel “net_hash_mix()” Information Disclosure Vulnerability
July 11, 2019Severity
Medium
Analysis Summary
An error related to handling multiple failed login attempts can be exploited to cause the hostd service to become unresponsive and subsequently cause a DoS condition for management functionality.
Impact
Denial of Service
Affected Vendors
VMWare
Affected Products
VMware ESXi versions 6.5 and 6.7
Remediation
Update to a fixed version if available.
Versions 6.5: Update to version ESXi650-201907201-UG.
Versions 6.7: No official solution is currently available.
Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.
