News for hackers. Stuff that matters.

A comment on CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow.

Re:CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow by yeukhon on Tuesday January 27, 2015 @11:46AM (#8954083)
Is Ubuntu 12.04 vulnerable to this?

>> this vulnerability affects many systems from Linux glibc-2.2 version published on 10 November 2000.

>> a fixed was pushed to glibc-2.17 et glibc-2.18

Ran dpkg -l libc6 on 12.04.5 shows it's 2.15. So anything before 2.17?

/lib/x86_64-linux-gnu/libc.so.6 GNU C Library (Ubuntu EGLIBC 2.15-0ubuntu10.7) stable release version 2.15, by Roland McGrath et al.

[ Parent | on HN ]
Re:CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow by href on Tuesday January 27, 2015 @11:48AM (#8954091)
According to Canonical it is: http://www.ubuntu.com/usn/usn-2485-1/
[ Parent | on HN ]
Re:CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow by jerematasno on Tuesday January 27, 2015 @07:43PM (#8957287)
Blog post coming soon, but 12.04 is vulnerable, but has a patch available.
[ Parent | on HN ]