OpenVZ Forum


Home » General » Support » Glibc exploit [CVE-2010-3847] (Glibc exploit [CVE-2010-3847])
Glibc exploit [CVE-2010-3847] [message #41088] Mon, 15 November 2010 03:38 Go to next message
ccto is currently offline  ccto
Messages: 61
Registered: October 2005
Member
Hello all,

With recent Glib exploit, may I know does it also impact OpenVZ?

Especially, if a VZ container was compromised by the glibc exploit, does it affect the host?

We tried to run it on one of the x64 CentOS 5 container, but have difficulty to reproduce it.

ref.:
www.seclists.org/fulldisclosure/2010/Oct/257
www.directadmin.com/forum/showthread.php?t=38109

x64 VZ Kernel: 2.6.18-194.8.1.el5.028stab070.5
x86 VZ Kernel: 2.6.18-194.8.1.el5.028stab070.5ent

Thank you very much for your kind attention.
Regards
George

Report message to a moderator

Re: Glibc exploit [CVE-2010-3847] [message #41092 is a reply to message #41088] Mon, 15 November 2010 22:45 Go to previous message
Ales is currently offline  Ales
Messages: 330
Registered: May 2009
Senior Member
You won't be able to reproduce it if you upgraded your glibc. Or are you still using the old version..?

Report message to a moderator

Previous Topic: vzdump snapshot: mode failure - unable to dump into snapshot (use option --dumpdir)
Next Topic: Progress information during backup
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ] [ PDF ]

Current Time: Tue Aug 12 06:54:02 GMT 2025

Total time taken to generate the page: 0.56157 seconds
Powered by FUDforum Powered by Virtuozzo Containers