Linux distrib vendors make patches available for GHOST
Thursday, January 29, 2015 - 06:00
in Mathematics & Economics
Qualys said on Tuesday that there was a serious weakness in the Linux glibc library. During a code audit, Qualys researchers discovered a buffer overflow in the __nss_hostname_digits_dots() function of glibc. The weakness can allow attackers to remotely take control of the victim's system without any prior knowledge of system credentials. This has become known as the GHOST vulnerability, discovered by researchers at the security company Qualys, which worked closely with Linux distribution vendors.