3 ms·
Has anyone actually tried the PoC on their systems? I will test on CentOS 6 and 7 after I have had my coffee. Anyone willing to volunteer to test on Ubuntu an
by LinuxBender 11y ago
Has anyone actually tried the PoC on their systems? I will test on CentOS 6 and 7 after I have had my coffee. Anyone willing to volunteer to test on Ubuntu and Debian?
Here is CentOS 7
[ 389.064412] do_general_protection: 159 callbacks suppressed
[ 389.064416] traps: CVE-2015-7547-c[1161] general rotection ip:7fa6b0d8fd67 sp:7ffdaf034a30 error:0 in libresolv-2.17.so[7fa6b0d87000+16000]
- gtirloni 11y agohttps://access.redhat.com/security/cve/cve-2015-7547 https://access.redhat.com/security/cve/cve-2015-7547
- LinuxBender 11y agoThanks @gtirloni
- lukeasrodgers 11y agoI tested my ubuntu 12.04 and it did not seem to be affected. server: vagrant@precise32:/tmp/CVE-2015-7547$ sudo python CVE-2015-7547-poc.py [UDP] Total Data len recv 36 [UDP] Total Data len recv 36 client: ./CVE-2015-7547-client CVE-2015-7547-client: getaddrinfo: Name or service not known vagrant@precise32:/tmp/CVE-2015-7547$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 12.04 LTS Release: 12.04 Codename: precise vagrant@precise32:/tmp/CVE-2015-7547$ ldd --version ldd (Ubuntu EGLIBC 2.15-0ubuntu10) 2.15 Copyright (C) 2012 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Written by Roland McGrath and Ulrich Drepper.
- atom_enger 11y agoI'm seeing the same behavior here. Thanks for the update and confirmation. Can others confirm if this means 12.04 isn't impacted by this cve?
- atom_enger 11y agoHere's 14.04 (fixed formatting) $ ./CVE-2015-7547-client [1] 15697 segmentation fault (core dumped)