Tenable Responds to CVE-2015-0235: GHOST (Updated)
A major vulnerability was disclosed today in the GNU C Library (“glibc”). CVE-2015-0235, known as “GHOST” in the media, affects Linux systems that use versions of the library prior to glibc-2.18, which was released on August 12, 2013. The GNU C Library is commonly used for standard system calls by programs written in C and C++. The vulnerability is a heap-based buffer overflow which affects the gethostbyname() and gethostbyname2() glibc function calls. A remote attacker who is able to make an application call with either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the application.
Update: Nessus plugins
Impacted operating system vendors are making updates available, and Tenable has released a series of local Nessus® plugins to detect the presence of affected versions of glibc:
| Distribution | Plugin |
|---|---|
| Amazon Linux AMI | 81024 |
| CentOS 5 | 81025 |
| CentOS 6 & 7 | 81026 |
| Debian 7 | 81029 |
| FreeBSD | 81062 |
| OracleVM 2.2 | 81119 |
| OracleVM 3.2 | 81118 |
| OracleVM 3.3 | 81103 |
| Oracle Linux 4 | 81099 |
| Oracle Linux 5 | 81044 |
| Oracle Linux 6 & 7 | 81031 |
| Red Hat Enterprise Linux 4 | 81104 |
| Red Hat Enterprise Linux 5 | 81033 |
| Red Hat Enterprise Linux 6 & 7 | 81034 |
| RHEL 5.6/5.9/6.2/6.4/6.5 Long Life/Advanced Support/Extended Support | 81068 |
| Scientific Linux 5 | 81037 |
| Scientific Linux 6 & 7 | 81038 |
| Slackware 13.0/13.1/13.37/14.0/14.1/current | 81075 |
| SUSE Linux Enterprise 11 | 81039 |
| Ubuntu 10.04 & 12.04 | 81042 |
You can also watch a video about Detecting GHOST with Nessus.
Update: SecurityCenter dashboard
A customized SecurityCenter™ dashboard to monitor, track and remediate critical assets affected by CVE-2015-0235 is available via the feed to provide insight on the impact to your environment and the progress of your efforts to remediate the issue.
You can also watch a video about Detecting GHOST with SecurityCenter.
This blog will be updated as events occur. And visit Tenable's GHOST Vulnerability page for more information.
Related Articles
How A CNAPP Can Take You From Cloud Security Novice To Native In 10 Steps
May 23, 2024Context is critical in cloud security. In a recent RSA presentation, Tenable's Shai Morag offered ten tips for end-to-end cloud infrastructure security.
Consolidate and Unify to Accelerate Your Security Efforts
October 13, 2022CISOs want to shrink their cybersecurity tool stack and see improved interoperability among products so that they can draw actionable insights from uniform and normalized data. Here we explain why this is key for understanding your environment’s security posture and empowering you to make better decisions about mitigating risk.
Narrow Focus on CVEs Leaves Organizations Vulnerable to Attacks
October 21, 2021CWEs and other vulnerabilities necessitate a single dashboard for complete cyber risk assessment A growing number of cybersecurity professionals have evolved their legacy vulnerability manageme...
Cybersecurity Snapshot: Critical Infrastructure Orgs Found Vulnerable to Basic Hacks, While New MITRE Tool Uses ML to Predict Attack Chains
September 20, 2024Report finds that many critical infrastructure networks can be breached using simple attacks. Plus, a new MITRE Engenuity tool uses machine learning to infer attack sequences. Meanwhile, CISA will lead a project to standardize civilian agencies’ cyber operations. And get the latest on XSS vulnerabilities, CIS Benchmarks and a China-backed botnet’s takedown!
An Analyst’s Guide to Cloud-Native Vulnerability Management: Where to Start and How to Scale
September 19, 2024Cloud-native workloads introduce a unique set of challenges that complicate traditional approaches to vulnerability management. Learn how to address these challenges and scale cloud-native VM in your org.
Mastering Containerization: Key Strategies and Best Practices
September 17, 2024As organizations modernize their infrastructure, containers offer unparalleled flexibility and scalability but they also introduce unique security challenges. In this blog we explain container security challenges, identify top threats and share how the newly released Tenable Enclave Security can keep your containers secure.
- Dashboards
- Nessus
- Plugins
- SecurityCenter