threat-intel
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
High
Summary
A new attack class, dubbed NatJack, has been disclosed that allows attackers to hijack active TCP sessions and spoof DNS responses by manipulating NAT connection state. The vulnerability exists in both Windows and Linux implementations, requiring privileged access to a system behind the same NAT as the victim. While no wild exploits have been observed yet, researchers recommend applying available updates and utilizing IP Source Guard.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data