LinuxGlibc庫嚴重安全漏洞修復通知（重要）

=======正確的指令碼（的確需要加個空格在 CANARY和 "in_the_coal_mine"之間  加空格,否則gcc GHOST.c -o GHOST  報GHOST.c:6:15: warning: missing whitespace after the macro name ）===============
root使用者執行
-----------------
cat > GHOST.c << EOF
#include
#include
#include
#include
#include
#define CANARY "in_the_coal_mine"
struct {
  char buffer[1024];
  char canary[sizeof(CANARY)];
} temp = { "buffer", CANARY };
int main(void) {
  struct hostent resbuf;
  struct hostent *result;
  int herrno;
  int retval;
  /*** strlen (name) = size_needed -sizeof (*host_addr) - sizeof (*h_addr_ptrs) - 1; ***/
  size_t len = sizeof(temp.buffer) -16*sizeof(unsigned char) - 2*sizeof(char *) - 1;
  char name[sizeof(temp.buffer)];
  memset(name, '0', len);
  name[len] = '\0';
  retval = gethostbyname_r(name,&resbuf, temp.buffer, sizeof(temp.buffer), &result, &herrno);
  if (strcmp(temp.canary, CANARY) !=0) {
    puts("vulnerable");
    exit(EXIT_SUCCESS);
  }
  if (retval == ERANGE) {
    puts("notvulnerable");
    exit(EXIT_SUCCESS);
  }
  puts("should nothappen");
  exit(EXIT_FAILURE);
}
EOF

gcc GHOST.c -o GHOST

./GHOST

=============================================================

[[root@iZ25ztsovnAA test]# cat > GHOST.c << EOF
> #include
> #include
> #include
> #include
> #include
> #define CANARY "in_the_coal_mine"
> struct {
>   char buffer[1024];
>   char canary[sizeof(CANARY)];
> } temp = { "buffer", CANARY };
> int main(void) {
>   struct hostent resbuf;
>   struct hostent *result;
>   int herrno;
>   int retval;
>   /*** strlen (name) = size_needed -sizeof (*host_addr) - sizeof (*h_addr_ptrs) - 1; ***/
>   size_t len = sizeof(temp.buffer) -16*sizeof(unsigned char) - 2*sizeof(char *) - 1;
>   char name[sizeof(temp.buffer)];
>   memset(name, '0', len);
>   name[len] = '\0';
>   retval = gethostbyname_r(name,&resbuf, temp.buffer, sizeof(temp.buffer), &result, &herrno);
>   if (strcmp(temp.canary, CANARY) !=0) {
>     puts("vulnerable");
>     exit(EXIT_SUCCESS);
>   }
>   if (retval == ERANGE) {
>     puts("notvulnerable");
>     exit(EXIT_SUCCESS);
>   }
>   puts("should nothappen");
>   exit(EXIT_FAILURE);
> }
> EOF
[root@iZ25ztsovnAA test]# gcc GHOST.c -o GHOST
[root@iZ25ztsovnAA test]# ./GHOST
vulnerable     《vulnerable  : 易受傷的,》

[=============================修復過程=====
[root@iZ25ztsovnAA test]# wget -O /etc/yum.repos.d/aliyun-5.repo
--2015-01-30 17:06:54--
Resolving mirrors.aliyun.com... 112.124.140.210, 115.28.122.210
Connecting to mirrors.aliyun.com|112.124.140.210|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2780 (2.7K) [application/octet-stream]
Saving to: `/etc/yum.repos.d/aliyun-5.repo'

100%[=====================================================================>] 2,780       --.-K/s   in 0s

2015-01-30 17:06:54 (221 MB/s) - `/etc/yum.repos.d/aliyun-5.repo' saved [2780/2780]

[root@iZ25ztsovnAA test]#
[root@iZ25ztsovnAA test]# yum update glibc
Repository base is listed more than once in the configuration
Repository updates is listed more than once in the configuration
Repository extras is listed more than once in the configuration
Repository addons is listed more than once in the configuration
Repository centosplus is listed more than once in the configuration
Repository contrib is listed more than once in the configuration
addons                                                                                  | 1.9 kB     00:00
base                                                                                    | 1.1 kB     00:00
extras                                                                                  | 2.1 kB     00:00
updates                                                                                 | 1.9 kB     00:00
updates/primary_db                                                                      | 266 kB     00:00
Excluding Packages in global exclude list
Finished
Setting up Update Process
Resolving Dependencies
--&gt Running transaction check
--&gt Processing Dependency: glibc = 2.5-65 for package: glibc-devel
--&gt Processing Dependency: glibc = 2.5-65 for package: nscd
--&gt Processing Dependency: glibc = 2.5-65 for package: glibc-headers
---&gt Package glibc.x86_64 0:2.5-123.el5_11.1 set to be updated
--&gt Processing Dependency: glibc-common = 2.5-123.el5_11.1 for package: glibc
--&gt Running transaction check
---&gt Package glibc-common.x86_64 0:2.5-123.el5_11.1 set to be updated
---&gt Package glibc-devel.x86_64 0:2.5-123.el5_11.1 set to be updated
---&gt Package glibc-headers.x86_64 0:2.5-123.el5_11.1 set to be updated
---&gt Package nscd.x86_64 0:2.5-123.el5_11.1 set to be updated
--&gt Finished Dependency Resolution

Dependencies Resolved

===============================================================================================================
Package                     Arch                 Version                          Repository             Size
===============================================================================================================
Updating:
glibc                       x86_64               2.5-123.el5_11.1                 updates               4.8 M
Updating for dependencies:
glibc-common                x86_64               2.5-123.el5_11.1                 updates                16 M
glibc-devel                 x86_64               2.5-123.el5_11.1                 updates               2.4 M
glibc-headers               x86_64               2.5-123.el5_11.1                 updates               602 k
nscd                        x86_64               2.5-123.el5_11.1                 updates               178 k

Transaction Summary
===============================================================================================================
Install       0 Package(s)
Upgrade       5 Package(s)

Total download size: 24 M
Is this ok [y/N]: y
Downloading Packages:
(1/5): nscd-2.5-123.el5_11.1.x86_64.rpm                                                 | 178 kB     00:00
(2/5): glibc-headers-2.5-123.el5_11.1.x86_64.rpm                                        | 602 kB     00:00
(3/5): glibc-devel-2.5-123.el5_11.1.x86_64.rpm                                          | 2.4 MB     00:00
(4/5): glibc-2.5-123.el5_11.1.x86_64.rpm                                                | 4.8 MB     00:00
(5/5): glibc-common-2.5-123.el5_11.1.x86_64.rpm                                         |  16 MB     00:07
---------------------------------------------------------------------------------------------------------------
Total                                                                          2.7 MB/s |  24 MB     00:09
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Updating       : glibc-common                                                                           1/10
  Updating       : glibc                                                                                  2/10
  Updating       : nscd                                                                                   3/10
  Updating       : glibc-headers                                                                          4/10
  Updating       : glibc-devel                                                                            5/10
  Cleanup        : glibc-headers                                                                          6/10
  Cleanup        : glibc-common                                                                           7/10
  Cleanup        : glibc                                                                                  8/10
  Cleanup        : nscd                                                                                   9/10
  Cleanup        : glibc-devel                                                                           10/10

Updated:
  glibc.x86_64 0:2.5-123.el5_11.1

Dependency Updated:
  glibc-common.x86_64 0:2.5-123.el5_11.1                  glibc-devel.x86_64 0:2.5-123.el5_11.1
  glibc-headers.x86_64 0:2.5-123.el5_11.1                 nscd.x86_64 0:2.5-123.el5_11.1

Complete!

[root@iZ25ztsovnAA test]# ./GHOST
notvulnerable     《notvulnerable  : 不易受傷的,》
[root@iZ25ztsovnAA test]#

Linux Glibc庫嚴重安全漏洞修復（詳細過程）

相關文章