News for hackers. Stuff that matters.

A comment on CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow. Parent comment

Re:CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow by jerematasno on Tuesday January 27, 2015 @08:34PM (#8957488)
It doesn't have to be internet accessible, AFAIK. If an attacker can get something to do arbitrary DNS lookups, I think it can be attacked. For instance, monitoring/log correlation software might be vulnerable.
[ Parent | on HN ]
Re:CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow by NickNameNick on Tuesday January 27, 2015 @10:57PM (#8958001)
If you have backend systems parsing XML, then an XXE[1] attack could trigger a DNS lookup, for example.

[1]https://www.owasp.org/index.php/XML_External_Entity_%28XXE%2...

[ Parent | on HN ]
Re:CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow by sarciszewski on Friday January 30, 2015 @12:50PM (#8973222)
Ooh, that could lead to some very interesting attack vectors. :D
[ Parent | on HN ]