CVE-2015-0235 PoC — GNU glibc 基于堆的缓冲区错误漏洞

Source

https://github.com/mikesplain/CVE-2015-0235-cookbook

Associated Vulnerability

Title: GNU glibc 基于堆的缓冲区错误漏洞 (CVE-2015-0235)
Description:Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Description

A chef cookbook to test the GHOST vulnerability

Readme

# CVE-2015-0235-cookbook

[![Circle CI](https://circleci.com/gh/mikesplain/CVE-2015-0235-cookbook.svg?style=svg)](https://circleci.com/gh/mikesplain/CVE-2015-0235-cookbook)
[![Dependency Status](https://gemnasium.com/mikesplain/CVE-2015-0235-cookbook.svg)](https://gemnasium.com/mikesplain/CVE-2015-0235-cookbook)


This cookbook will test if you are vulnerable to [CVE-2015-0235](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235).  

Current behavior will error out when test fails:
```
bash 'test vulnerability against libc' do
  cwd Chef::Config[:file_cache_path]
  code <<-EOH
    ./CVE-2015-0235
    EOH
  returns [1]
end
```


For debian based systems: [CVE-2015-0235](https://security-tracker.debian.org/tracker/CVE-2015-0235)

For Rhel based systems: [CVE-2015-0235](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-0235)


## Supported Platforms

- Debian / Ubuntu
- Centos / Rhel

## Todo
- [ ] Add Test for currently running processes still using old version (easy in debian with checkrestart -v)
- [ ] Add a script to help with fixing?


## Usage

### CVE-2015-0235::default

Include `CVE-2015-0235` in your node's `run_list`:

```json
{
  "run_list": [
    "recipe[CVE-2015-0235]"
  ]
}
```

## License and Authors

Author:: Mike Splain (<mike.splain@gmail.com>)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →