[B! glibc] kyabã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kyab id:kyab

glibcã«é–¢ã™ã‚‹kyabã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€Œglibc ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®è„†å¼±æ€§ (CVE-2015-7547) ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·ã€ã«ã¤ã„ã¦ï½œPLANEX
å¹³ç´ ã¯å¼Šç¤¾è£½å“ã‚’ã”æ„›ç”¨ã„ãŸã ãã¾ã—ã¦ã€èª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ Linuxã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã„ã¦åºƒãä½¿ã‚ã‚Œã¦ã„ã‚‹GNU Cãƒ©ã‚¤ãƒ–ãƒ©ãƒªã€Œglibcã€ã« ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã®è„†å¼±æ€§ãŒå˜åœ¨ã™ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šæ³¨æ„å–šèµ·ã•ã‚Œã¦ãŠã‚Šã¾ã™ã€‚ ã“ã®è„†å¼±æ€§ã‚’åˆ©ç”¨ã•ã‚ŒãŸå ´åˆã€é éš”ã®æ”»æ’ƒè€…ã«ã‚ˆã£ã¦ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã•ã‚ŒãŸã‚Šã€ã‚µãƒ¼ãƒ“ã‚¹ã®é‹ç”¨å¦¨å®³ã‚’å—ã‘ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ å¼Šç¤¾è£½å“ã§ã¯ãƒ¡ãƒ¢ãƒªã®ä½¿ç”¨é‡ã®è¦³ç‚¹ã‹ã‚‰ã€Œglibcã€ã‚’ä½¿ç”¨ã—ã¦ãŠã‚Šã¾ã›ã‚“ãŒ Googleã‹ã‚‰å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã‚³ãƒ³ã‚»ãƒ—ãƒˆå®Ÿè¨¼ã‚³ãƒ¼ãƒ‰ã‚’ç”¨ã„ã¦ä¸»è¦ãƒ«ãƒ¼ã‚¿ã€ã‚«ãƒ¡ãƒ©ã®è„†å¼±æ€§ã®ç¢ºèªã‚’è¡Œã£ã¦ãŠã‚Šã¾ã™ã€‚ ä¸Šè¨˜ã‚³ãƒ¼ãƒ‰ã®æ¤œè¨¼ã§ã‚‚ã€ç‰¹ã«å•é¡Œã”ã–ã„ã¾ã›ã‚“ã®ã§ã€å®‰å¿ƒã—ã¦ã”ä½¿ç”¨ãã ã•ã„ã€‚ ã¾ãŸã€ç¶™ç¶šã—ã¦å®‰å…¨æ€§ã®ç¢ºèªã‚’è¡Œã£ã¦ãŠã‚Šã¾ã™ã®ã§ã€ä¸å…·åˆãŒç¢ºèªã§ããŸéš›ã«ã¯ã€å¼Šç¤¾ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã§å…¬é–‹ã„ãŸã—ã¾ã™ã€‚
kyab 2016/02/22
security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

glibc

planex
ãƒªãƒ³ã‚¯
CVE-2015-7547 glibc ã«ãŠã‘ã‚‹ getaddrinfo ã®è„†å¼±æ€§ã«ã¤ã„ã¦ â€“ IIJ Security Diary
ã“ã®è„†å¼±æ€§ã¯2016å¹´2æœˆ17æ—¥ã«å¯¾ç–æ¸ˆã¿ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¨å…±ã«å…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚å†…å®¹ã¨ã—ã¦ã¯ getaddrinfo ã®å‘¼ã³å‡ºã—ã«ãŠã„ã¦ã‚¹ã‚¿ãƒƒã‚¯ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ãŒç™ºç”Ÿã™ã‚‹ç‰©ã§ã™ã€‚å…¬é–‹æ™‚ç‚¹ã§ä»¥ä¸‹ã®é€šã‚Šã€PoC ã‚’å«ã‚ãŸæŠ€è¡“çš„ãªè©³ç´°ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚æœ¬è¨˜äº‹ã§ã¯ã€è„†å¼±æ€§ãŒç™ºç”Ÿã™ã‚‹ã¾ã§ã®å‡¦ç†ã¨ã€å›žé¿ç–ã«ã¤ã„ã¦è§£èª¬ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ CVE-2015-7547 â€” glibc getaddrinfo() stack-based buffer overflow Google Online Security Blog: CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow è„†å¼±æ€§ã«è‡³ã‚‹ã¾ã§ ä»Šå›žã®è„†å¼±æ€§ã¯ getaddrinfo ã®å‘¼ã³å‡ºã—ã«èµ·å› ã—ã¦ã„ã¾ã™ã€‚è„†å¼±æ€§ã®ã‚ã‚‹ç®‡æ‰€ã¾ã§ã®é–¢æ•°å‘¼ã³å‡ºã—ã¯ä»¥ä¸‹ã®æ§˜ã«ãªã£ã¦ã„ã¾ã™ã€‚ getaddri
kyab 2016/02/20
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

glibc

è„†å¼±æ€§

DNS

getaddrinfo
ãƒªãƒ³ã‚¯
Linuxã®ã€Œglibcã€ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«è„†å¼±æ€§ã§ä¿®æ£ãƒ‘ãƒƒãƒé…å¸ƒã€iOS/Androidã§ã®è¢«å®³ã¯é™å®šçš„ã‹ã€€
kyab 2016/02/17
glibc

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
glibcã®è„†å¼±æ€§å¯¾ç–ï¼ˆå–ã‚Šæ€¥ãŽiptables/firewalldã§å©ãè½ã¨ã™ï¼ï¼‰for CVE-2015-7547 - Qiita
ã¯ã˜ã‚ã« glibcã§ãƒ¤ãƒãƒ¡ãªè„†å¼±æ€§ã‚ã‚¿ãƒ¼ï¼ ã€Œglibcã€ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«è„†å¼±æ€§ã€Linuxã®å¤§éƒ¨åˆ†ã«æ·±åˆ»ãªå½±éŸ¿ - ITmedia ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º Google Online Security Blog: CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow CVE-2015-7547: Critical Vulnerability in glibc getaddrinfo - SANS Internet Storm Center Carlos O'Donell - [PATCH] CVE-2015-7547 --- glibc getaddrinfo() stack-based buffer overflo å†…å®¹è¦‹ã‚‹ã«ã€getaddrinfoã®åå‰æœè§£æ±ºæ™‚ã«æ‚ªæ„ã‚ã‚‹DNSãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ‘ã‚±ãƒƒãƒˆé£Ÿã‚ã•ã‚Œã‚‹ã¨exploitç™ºå‹•
kyab 2016/02/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

glibc
ãƒªãƒ³ã‚¯
CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow
The latest news and insights from Google on security and safety on the Internet
kyab 2016/02/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

glibc
ãƒªãƒ³ã‚¯
GHOST è„†å¼±æ€§ã¯å¦‚ä½•æ§˜ã«ä½¿ã†ã®ã‹ | Webã‚·ã‚¹ãƒ†ãƒ é–‹ç™ºï¼æ•™è‚²ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚¿ã‚¤ãƒ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ¡ãƒ‡ã‚£ã‚¢
å…ˆæ—¥ GHOST ã¨å‘¼ã°ã‚Œã‚‹ glibc ã®è„†å¼±æ€§ãŒç™ºè¡¨ã•ã‚ŒãŸã€‚ãªã‚“ã§ã‚‚ã€ã€Œãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€ã‚‰ã—ã„ã§ã¯ãªã„ã‹ã€‚ã—ã‹ã‚‚æ§˜ã€…ãªãƒ—ãƒã‚°ãƒ©ãƒ ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªéƒ¨åˆ†ã®å•é¡Œã¨ã‚ã£ã¦ã€å½±éŸ¿ç¯„å›²ãŒã¨ã¦ã‚‚åºƒã„ã€‚ãªã‹ãªã‹åŽ„ä»‹ãªã“ã¨ã§ã‚ã‚‹ã€‚ ã¯ã¦ã€ã—ã‹ã—ä¸€ä½“å…¨ä½“ã©ã†ã‚„ã£ã¦ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ã‚ˆã†ã¨ã„ã†ã®ã ã‚ã†ï¼Ÿ è©±ã‚’èžãã«ã€ãŸã‹ãŒæ•°ãƒã‚¤ãƒˆã®æƒ…å ±ã‚’ç¯„å›²å¤–ã®ãƒ¡ãƒ¢ãƒªã«æ›¸ãè¾¼ã‚ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã ã‘ã ã¨ã„ã†ã€‚å®Ÿéš›ãã‚Œã ã‘ã®ã“ã¨ã§ã‚µãƒ¼ãƒãƒ¼ã®ä¹—ã£å–ã‚Šãªã©ã§ãã‚‹ã‚‚ã®ãªã®ã ã‚ã†ã‹ã€‚ãã‚“ãªã‚ã‘ã§ã€ãã®ç–‘å•ã«ç”ãˆã‚‹ã¹ãã€æœ¬è¨˜äº‹ã§ã¯ä»¥ä¸‹ã® URL ã§è§£èª¬ã•ã‚Œã¦ã„ã‚‹å®Ÿéš›ã®æ”»æ’ƒæ–¹æ³•ã‚’è‹¥å¹²ç«¯æŠ˜ã£ã¦ç´¹ä»‹ã—ã¦ã¿ã‚ˆã†ã¨æ€ã†ã€‚ http://www.openwall.com/lists/oss-security/2015/01/27/9 ãªãŠã€æœ¬è¨˜äº‹ã¯ã“ã®è„†å¼±æ€§ãã®ã‚‚ã®ã«å¯¾ã™ã‚‹ç·Šæ€¥åº¦ãªã©ã«ã¤ã„ã¦è¨€
kyab 2015/01/30
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

è„†å¼±æ€§

ghost

glibc
ãƒªãƒ³ã‚¯
1