Veeam proxy appliance and vulnerability "GHOST"

[kks]

Hello, I have the following question: is Veeam proxy linux appliance vulnerable to this:
https://isc.sans.edu/diary/New+Critical ... OST)/19237

This vulnerability in linux glibc library was recently discovered. Basically, appliance is vulnerable if some versions of glibc is installed. I tried to verify if glibc or some other libraries are installed upon the appliance but I did not managed to to it. Could anybody please clarify. Thank you.

[dellock6]

Hi,
Veeam proxies run on Windows OS, so any linux vulnerability do not apply to them.

Thanks.

[ShaneLovett]

Hi Luca,

Not the Veeam proxies, but the Veeam proxy appliances used in virtual labs.

Thanks.

[foggy]

We are currently checking the appliance for vulnerability and, in case it is vulnerable, will address this in the next patch. Thanks for the heads up!

[ShaneLovett]

Any update please?

[foggy]

With Patch 2 the appliance will not be vulnerable.

[ShaneLovett]

Hi foggy,

Do you mean Patch 2 for Veeam B&R v8? If so, what is the ETA for release?

Thanks.

[Vitaliy S.]

Yes, foggy was referring to patch 2 for Veeam B&R v8. There is an RC version of the patch 2, so it should not be long to wait.