CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow

The latest news and insights from Google on security and safety on the Internet

[mib-dbsinfra]

> The vulnerability relies on an oversized (2048+ bytes) UDP or TCP response, which is followed by another response…

[hackapellmanda]

朝一作業かなー

[tetsutalow]

こりゃマズい。glibc getaddrinfoに今時stack overflow…ASLRなかったら即死してるとこ。

[mrmt]

cruftedなネームサーバを向いてるとgetaddrinfo(3)がやばいのか

[mattn]

やばみ

[Yuryu]

ちょうやばい / Google Online Security Blog:CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow via @google

[xrekkusu]

Failed exploit indicators, due to ASLR - Google Online Security Blog: CVE-2015-7547: glibc getaddrinfo st… :

[mickn]

Google Online Security Blog:CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow @googleさんから

[napsucks]

ううむ

[stealthinu]

えっとこれどのくらいやばいやつ？？glibcでgetaddrinfoのスタックオーバーフローっていうだけでなんかだいぶイヤな気分になってくるんだけど…