Vesta Control Panel - Forum

Community Forum

Skip to content

Advanced search
  • Quick links
    • Main site
    • Github repo
    • Google Search
  • FAQ
  • Login
  • Register
  • Board index Main Section General Discussion RHEL/CentOS
  • Search

Important! linux glibc ghost bug

RHEL/CentOS related topics
Locked
  • Print view
Advanced search
2 posts • Page 1 of 1
Milka
Posts: 137
Joined: Tue Feb 11, 2014 2:03 pm

Important! linux glibc ghost bug

Post by Milka » Wed Jan 28, 2015 10:04 am

A heap-based buffer overflow was found in glibc's __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the application.

Several patches have been released for various systems. Make sure you update!

As far as I know the following systems have not been affected and are thus still safe:
Ubuntu from version 13.10 and up, FreeNAS, FreeBSD, OpenBSD, Fedora.
Top

skurudo
VestaCP Team
Posts: 8099
Joined: Fri Dec 26, 2014 2:23 pm
Contact:
Contact skurudo
Website Facebook Google+ Skype
Twitter

Re: Important! linux glibc ghost bug

Post by skurudo » Mon Feb 01, 2016 5:02 pm

Code: Select all

yum update; yum upgrade
or

Code: Select all

apt-get update; apt-get upgrade
Top


Locked
  • Print view

2 posts • Page 1 of 1

Return to “RHEL/CentOS”



  • Board index
  • All times are UTC
  • Delete all board cookies
  • The team
Powered by phpBB® Forum Software © phpBB Limited
*Original Author: Brad Veryard
*Updated to 3.2 by MannixMD
 

 

Login  •  Register

I forgot my password