From owner-freebsd-questions@FreeBSD.ORG  Wed Jan 28 20:35:15 2015
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id C8918C17
 for <freebsd-questions@freebsd.org>; Wed, 28 Jan 2015 20:35:15 +0000 (UTC)
Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.52.97])
 by mx1.freebsd.org (Postfix) with ESMTP id 9F7FFAC6
 for <freebsd-questions@freebsd.org>; Wed, 28 Jan 2015 20:35:15 +0000 (UTC)
Received: by cosmo.uchicago.edu (Postfix, from userid 48)
 id 14ADDCB8CA0; Wed, 28 Jan 2015 14:35:09 -0600 (CST)
Received: from 128.135.70.2 (SquirrelMail authenticated user valeri)
 by cosmo.uchicago.edu with HTTP;
 Wed, 28 Jan 2015 14:35:08 -0600 (CST)
Message-ID: <56822.128.135.70.2.1422477308.squirrel@cosmo.uchicago.edu>
Date: Wed, 28 Jan 2015 14:35:08 -0600 (CST)
Subject: Re: Linux "Ghost" Remote Code Execution Vulnerability
From: "Valeri Galtsev" <galtsev@kicp.uchicago.edu>
To: "Adam Vande More" <amvandemore@gmail.com>
Reply-To: galtsev@kicp.uchicago.edu
User-Agent: SquirrelMail/1.4.8-5.el5.centos.7
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
References: <20150128145247.5086e9a4@scorpio>   
 <CA+tpaK30yc5OoOySsB+Z0WzmzLFYNHvcedcjBVB0A0weTxg1Sg@mail.gmail.com>
In-Reply-To: <CA+tpaK30yc5OoOySsB+Z0WzmzLFYNHvcedcjBVB0A0weTxg1Sg@mail.gmail.com>
Cc: User questions <freebsd-questions@freebsd.org>
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jan 2015 20:35:15 -0000

On Wed, January 28, 2015 2:24 pm, Adam Vande More wrote:
> On Wed, Jan 28, 2015 at 1:52 PM, Jerry <jerry@seibercom.net> wrote:
>
>> Does this vulnerability affect FreeBSD?
>> https://www.us-cert.gov/ncas/current-activity/2015/01/27/Linux-Ghost-Remote-Code-Execution-Vulnerability

This is glibc gethostbyname:

http://www.openwall.com/lists/oss-security/2015/01/27/9

FreeBSD doesn't use glibc in base system (as far as I know). And I do not
see glibc in ports...

Valeri

>
> Probably the linuxulator.
>

++++++++++++++++++++++++++++++++++++++++
Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247
++++++++++++++++++++++++++++++++++++++++