Note that binaries that are statically linked to the vulnerable glibc must be recompiled to be made safe-this test does not cover these cases, only the system’s GNU C Library. We will cover how to do this in Ubuntu, Debian, CentOS, and RHEL. The easiest way to test if your servers are vulnerable to GHOST is to check the version of glibc that is in use. We will show you how to test if your systems are vulnerable and, if they are, how to update glibc to fix the vulnerability. It is highly recommended that you update and reboot all of your affected Linux servers. Many Linux distributions including, but not limited to, the following are potentially vulnerable to GHOST and should be patched: That is, systems that use an unpatched version of glibc from versions 2.2 to 2.17 are at risk.

The GHOST vulnerability can be exploited on Linux systems that use versions of the GNU C Library prior to glibc-2.18. Like Shellshock and Heartbleed, this vulnerability is serious and affects many servers. In summary, the vulnerability allows remote attackers to take complete control of a system by exploiting a buffer overflow bug in glibc’s Get HOST functions (hence the name). Speeds the loading of programs which use shared libraries.On January 27, 2015, a GNU C Library (glibc) vulnerability, referred to as the GHOST vulnerability, was announced to the general public. It also creates a cache (/etc/ld.so.cache) which System and sets up the symbolic links that are used to load shared Link bindings between ld.so and shared libraries.

Ldconfig is a basic system program which determines run-time This package now also provides ldconfig which was package seperately in This particular packageĬontains the most important sets of shared libraries: the standard C Kept in one place and shared between programs. Memory, as well as to make upgrading easier, common system code is The glibc package contains standard libraries which are used by System could be 'redhat', 'redhat-7.2', 'mandrake' or 'gnome',Īrch could be 'i386' or 'src', etc. The System and Arch are optional added filters, for example It does not support multiple arguments yet. Provides( webserver), absolute file names ( /usr/bin/apache),īinaries ( gprof) or shared libraries ( libXm.so.2) in The search service can find package by either name ( apache),

Centos glibc 2.18