Critical Linux vulnerability, patch now
3 views
Skip to first unread message
Joe ODonnell
Jan 27, 2015, 9:02:52 PM1/27/15
to makersa...@googlegroups.com
A new security hole has been discovered in Linux that allows anyone to remotely take control of a system without knowing the username and password.
ITworld | January 27, 2015
The discovery was made by Qualys, a cloud security company. The hole impacts any Linux system built with glibc-2.2 released on November 10, 2000. The vulnerability, called GHOST (CVE-2015-0235), is triggered by the gethostbyname function.
Actually there was a patch released back on May 21, 2013, between the releases of glibc-2.17 and glibc-2.18. However it was not considered to be a security risk and thus major Linux distributions that offer long term support and get security updates remained vulnerable, including Debian 7 (wheezy), Red Hat Enterprise Linux 6 & 7, CentOS 6 & 7 and Ubuntu 12.04.
Reply all
Reply to author
Forward
0 new messages