The Patching Friars' AlmanacA calendar of CVE saints

January 17

EtherleakHoly card for etherleak, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 0x? Etherleak ZERO NON IMPLEVIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Etherleak, Who Stuffed Packets With Secrets

Patron of network drivers written in a hurry, packets that are too short, and everything left behind in buffers.

Life

In January 2003 researchers at @stake found that many network card drivers, to pad Ethernet frames to the minimum length, filled them with whatever they found in memory instead of zeros. Every small packet left with a surprise filling: fragments of earlier traffic, or of kernel memory.

Prayer

O Saint Etherleak, who stuffs packets with whatever comes to hand, teach our drivers the worth of the zero byte. Amen.

How to celebrate

Celebrated by zeroing a buffer before using it, in memory of all those who did not.

Short packet, generous stuffing.

Technical record

Disclosed on
January 17 2003
CVE
CVE-2003-0001

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

Sources: ofirarkin.wordpress.com

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.