Google Chrome to block port 554 to stop NAT Slipstreaming attacks

[silversurfer]

Content source

https://www.bleepingcomputer.com/news/security/google-chrome-to-block-port-554-to-stop-nat-slipstreaming-attacks/

Google Chrome will block the browser's access to TCP port 554 to protect against attacks using the NAT Slipstreaming 2.0 vulnerability. [...]

In the past, Google also blocked port 554 but removed the block after complaints from enterprise users.

"Chrome briefly blocked port 554 before, but it was unblocked due to complaints from enterprise users. However, we have now achieved rough consensus at Add port blocking for tftp, netbios-ns, snmp, rtsp, h323gatestat, h32… by mozfreddyb · Pull Request #1148 · whatwg/fetch to block 554," Chromium engineer Adam Rice announced today.

Firefox 84+ and Safari are already blocking port 554 in their browsers.

Google Chrome to block port 554 to stop NAT Slipstreaming attacks

Google Chrome will block the browser's access to TCP port 554 to protect against attacks using the NAT Slipstreaming 2.0 vulnerability.

www.bleepingcomputer.com