Comprehensive data protection for all workloads
Post Reply
kks
Veeam Software
Posts: 1
Liked: 1 time
Joined: Jan 20, 2015 12:14 pm
Contact:

Veeam proxy appliance and vulnerability "GHOST"

Post by kks » 1 person likes this post

Hello, I have the following question: is Veeam proxy linux appliance vulnerable to this:
https://isc.sans.edu/diary/New+Critical ... OST)/19237

This vulnerability in linux glibc library was recently discovered. Basically, appliance is vulnerable if some versions of glibc is installed. I tried to verify if glibc or some other libraries are installed upon the appliance but I did not managed to to it. Could anybody please clarify. Thank you.
dellock6
VeeaMVP
Posts: 6137
Liked: 1928 times
Joined: Jul 26, 2009 3:39 pm
Full Name: Luca Dell'Oca
Location: Varese, Italy
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by dellock6 »

Hi,
Veeam proxies run on Windows OS, so any linux vulnerability do not apply to them.

Thanks.
Luca Dell'Oca
Principal EMEA Cloud Architect @ Veeam Software

@dellock6
https://www.virtualtothecore.com/
vExpert 2011 -> 2022
Veeam VMCE #1
ShaneLovett
Novice
Posts: 3
Liked: never
Joined: Feb 24, 2012 11:07 am
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by ShaneLovett »

Hi Luca,

Not the Veeam proxies, but the Veeam proxy appliances used in virtual labs.

Thanks.
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by foggy »

We are currently checking the appliance for vulnerability and, in case it is vulnerable, will address this in the next patch. Thanks for the heads up!
ShaneLovett
Novice
Posts: 3
Liked: never
Joined: Feb 24, 2012 11:07 am
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by ShaneLovett »

Any update please?
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by foggy »

With Patch 2 the appliance will not be vulnerable.
ShaneLovett
Novice
Posts: 3
Liked: never
Joined: Feb 24, 2012 11:07 am
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by ShaneLovett »

Hi foggy,

Do you mean Patch 2 for Veeam B&R v8? If so, what is the ETA for release?

Thanks.
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by Vitaliy S. »

Yes, foggy was referring to patch 2 for Veeam B&R v8. There is an RC version of the patch 2, so it should not be long to wait.
Post Reply

Who is online

Users browsing this forum: Regnor and 275 guests