Comprehensive data protection for all workloads
Post Reply
kks
Veeam Software
Posts: 1
Liked: 1 time
Joined: Jan 20, 2015 12:14 pm
Contact:

Veeam proxy appliance and vulnerability "GHOST"

Post by kks » Jan 29, 2015 3:39 pm 1 person likes this post

Hello, I have the following question: is Veeam proxy linux appliance vulnerable to this:
https://isc.sans.edu/diary/New+Critical ... OST)/19237

This vulnerability in linux glibc library was recently discovered. Basically, appliance is vulnerable if some versions of glibc is installed. I tried to verify if glibc or some other libraries are installed upon the appliance but I did not managed to to it. Could anybody please clarify. Thank you.

dellock6
Veeam Software
Posts: 5883
Liked: 1704 times
Joined: Jul 26, 2009 3:39 pm
Full Name: Luca Dell'Oca
Location: Varese, Italy
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by dellock6 » Feb 01, 2015 5:39 pm

Hi,
Veeam proxies run on Windows OS, so any linux vulnerability do not apply to them.

Thanks.
Luca Dell'Oca
Principal EMEA Cloud Architect @ Veeam Software

@dellock6
https://www.virtualtothecore.com/
vExpert 2011 -> 2020
Veeam VMCE #1

ShaneLovett
Novice
Posts: 3
Liked: never
Joined: Feb 24, 2012 11:07 am
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by ShaneLovett » Feb 02, 2015 11:18 am

Hi Luca,

Not the Veeam proxies, but the Veeam proxy appliances used in virtual labs.

Thanks.

foggy
Veeam Software
Posts: 18791
Liked: 1650 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by foggy » Feb 03, 2015 9:20 am

We are currently checking the appliance for vulnerability and, in case it is vulnerable, will address this in the next patch. Thanks for the heads up!

ShaneLovett
Novice
Posts: 3
Liked: never
Joined: Feb 24, 2012 11:07 am
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by ShaneLovett » Feb 26, 2015 9:27 am

Any update please?

foggy
Veeam Software
Posts: 18791
Liked: 1650 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by foggy » Feb 27, 2015 10:26 am

With Patch 2 the appliance will not be vulnerable.

ShaneLovett
Novice
Posts: 3
Liked: never
Joined: Feb 24, 2012 11:07 am
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by ShaneLovett » Mar 09, 2015 1:40 pm

Hi foggy,

Do you mean Patch 2 for Veeam B&R v8? If so, what is the ETA for release?

Thanks.

Vitaliy S.
Product Manager
Posts: 23602
Liked: 1706 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Veeam proxy appliance and vulnerability "GHOST"

Post by Vitaliy S. » Mar 09, 2015 1:51 pm

Yes, foggy was referring to patch 2 for Veeam B&R v8. There is an RC version of the patch 2, so it should not be long to wait.

Post Reply

Who is online

Users browsing this forum: No registered users and 39 guests