Security:Ghost

lastmod 2018-08-17created 2015-01-305 edits

GHOST is a security vulnerability in the Linux GNU C library (glibc).

On all Linux systems with glibc versions 2.2 to 2.17, incorrect memory use in a specific library function (__nss_hostname_digits_dots()) causes an overflow.

Update

• CentOS :http://lists.centos.org/pipermail/centos/2015-January/149413.html
• Debian : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776391
• Redhat : https://access.redhat.com/articles/1332213
• Ubuntu : http://www.ubuntu.com/usn/usn-2485-1

Favorite site

• How To Patch and Protect Linux Server Against the Glibc GHOST Vulnerability # CVE-2015-0235
• OpenWall: GHOST: glibc gethostbyname buffer overflow