Item — HN Reader

Has anyone actually tried the PoC on their systems? I will test on CentOS 6 and 7 after I have had my coffee. Anyone willing to volunteer to test on Ubuntu and Debian?

Here is CentOS 7

    [  389.064412] do_general_protection: 159 callbacks suppressed
    [  389.064416] traps: CVE-2015-7547-c[1161] general  rotection ip:7fa6b0d8fd67 sp:7ffdaf034a30 error:0 in libresolv-2.17.so[7fa6b0d87000+16000]

3 comments

I tested my ubuntu 12.04 and it did not seem to be affected.

  server:
  vagrant@precise32:/tmp/CVE-2015-7547$ sudo python CVE-2015-7547-poc.py
  [UDP] Total Data len recv 36
  [UDP] Total Data len recv 36

  client:
  ./CVE-2015-7547-client
  CVE-2015-7547-client: getaddrinfo: Name or service not known

  vagrant@precise32:/tmp/CVE-2015-7547$ lsb_release -a
  No LSB modules are available.
  Distributor ID: Ubuntu
  Description:    Ubuntu 12.04 LTS
  Release:        12.04
  Codename:       precise

  vagrant@precise32:/tmp/CVE-2015-7547$ ldd --version
  ldd (Ubuntu EGLIBC 2.15-0ubuntu10) 2.15
  Copyright (C) 2012 Free Software Foundation, Inc.
  This is free software; see the source for copying conditions.  There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  Written by Roland McGrath and Ulrich Drepper.

I'm seeing the same behavior here. Thanks for the update and confirmation. Can others confirm if this means 12.04 isn't impacted by this cve?

https://access.redhat.com/security/cve/cve-2015-7547

Thanks @gtirloni

Here's 14.04 (fixed formatting)

  $ ./CVE-2015-7547-client
  [1]    15697 segmentation fault (core dumped)