Important! linux glibc ghost bug
Posted: Wed Jan 28, 2015 10:04 am
A heap-based buffer overflow was found in glibc's __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the application.
Several patches have been released for various systems. Make sure you update!
As far as I know the following systems have not been affected and are thus still safe:
Ubuntu from version 13.10 and up, FreeNAS, FreeBSD, OpenBSD, Fedora.
Several patches have been released for various systems. Make sure you update!
As far as I know the following systems have not been affected and are thus still safe:
Ubuntu from version 13.10 and up, FreeNAS, FreeBSD, OpenBSD, Fedora.