IDNetters Forums

Technical News & Discussion => Unix/Linux News & Discussion => Topic started by: Simon on Feb 19, 2016, 16:35:31

Title: The Register: Tons of Linux apps at risk
Post by: Simon on Feb 19, 2016, 16:35:31
A huge amount of Linux software can be hijacked by hackers from the other side of the internet, thanks to a serious vulnerability in the GNU C Library (glibc).

Simply clicking on a link or connecting to a server can lead to remote code execution, allowing scumbags to steal passwords, spy on users, attempt to seize control of computers, and so on. Any software that connects to things on a network or the internet, and uses glibc, is at risk.

http://www.theregister.co.uk/2016/02/16/glibc_linux_dns_vulernability/
Title: Re: The Register: Tons of Linux apps at risk
Post by: zappaDPJ on Feb 19, 2016, 17:53:22
My understanding is that although this is a real risk which affects a lot of software, it's quite difficult to exploit due to various protections such as address space layout randomization which is designed to prevent these kinds of attacks.
Title: Re: The Register: Tons of Linux apps at risk
Post by: Simon on Feb 19, 2016, 19:04:29
Of course, The Register would never make a mountain out of a molehill.   ::)
Title: Re: The Register: Tons of Linux apps at risk
Post by: zappaDPJ on Feb 19, 2016, 19:21:55
I think the reference to 'scumbags' made me question their journalistic integrity just a smidgen ;D
Title: Re: The Register: Tons of Linux apps at risk
Post by: Glenn on Feb 19, 2016, 19:30:40
I thought the BBC was slow at reporting, but they run this earlier in the week.