3 ms·
Is there any way to quickly test if any of my machines are vulnerable?
by sl-1 7y ago
Is there any way to quickly test if any of my machines are vulnerable?
- loeg 7y ago[ "$(uname -s)" = Linux ] && echo "Vulnerable" ("CVE-2019-11479: Excess Resource Consumption Due to Low MSS Values (all Linux versions)", "CVE-2019-11478: SACK Slowness (Linux < 4.15) or Excess Resource Usage (all Linux versions).") https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md https://github.com/Netflix/security-bulletins/blob/master/ad...
- superkuh 7y agoI know you're being glib, but are 2.6.x kernels vulnerable? The big corps tend define all linux as all linux that they support and isn't end of life. As far as I read early 3.x kernels on the Ubuntu side are not effected. Like version 12 and before. So there's plenty of linux being used out there that's probably not effected.
- tim-- 7y agoYes, 2.6.x kernels are vulnerable, starting with 2.6.18-8.el5 Edit: on Red Hat EL5
- sp332 7y agoIf you click the Diagnose tab, there's a script that will check your kernel versions and relevant TCP settings. https://access.redhat.com/sites/default/files/cve-2019-11477--2019-06-17-1629.sh https://access.redhat.com/sites/default/files/cve-2019-11477... If you're not running RedHat, the kernel detection might be too strict, but at least there's some example code for you to check your own settings.