'Ghost' security flaw is as bad as Shellshock, allowing remote code execution

[SIGSEGV]

http://arstechnica.com/security/2015/01/highly-critical-ghost-allowing-code-execution-affects-most-linux-systems/

Honestly, this is interesting... And pretty bad... I wonder who will exploit this bug on a major website maliciously first...

[thexzenon]

This sounds like a serious problem, hope it gets fixed soon. You have to wonder though, how much damage has been done before discovering this flaw (and to a lesser extent will be done). 

 

 

 

The buffer overflow flaw resides in __nss_hostname_digits_dots(), a glibc function that's invoked by the gethostbyname() and gethostbyname2() function calls.
(...)
The glibc is the most common code library used by Linux. It contains standard functions that programs written in the C and C++ languages use to carry out common tasks. The vulnerability also affects Linux programs written in Python, Ruby, and most other languages because they also rely on glibc. As a result, most Linux systems should be presumed vulnerable unless they run an alternative to glibc or use a glibc version that contains the update from two years ago.