Linux security vulnerability exposure Bash is more serious than heartbleed

Linux security vulnerability exposure Bash is more serious than heartbleed

September 25 message: a Linux security vulnerability that is more serious than "heartbleed" was found, although no attack by this vulnerability has been found, but a lower operating threshold than "heartbleed" makes it more risky than the former.

Bash is a software used to control Linux computer command prompts. Dan gido, CEO of Trail of Bits, a network security company, said: "With heartbleed" only allows hackers to snoop on computers, but does not allow hackers to gain control of computers. Bash vulnerabilities are different. Hackers can use them to completely control the target computer system.

Worse, it is easier to exploit the Bash vulnerability. You only need to cut and paste a line of software code to achieve the effect. Such a low threshold may attract more hackers, which is also a concern of security experts.

Todd mongozley, Engineering Manager of Network Security Company Rapid7, said the severity of Bash vulnerabilities was rated as 10 and the exploitation difficulty was rated as low, this means that more hackers will use it to cause a more serious security crisis.

"Using this vulnerability, attackers may take over the entire operating system of a computer, access confidential information, and modify the system. Any computer system that uses Bash must be immediately patched ."

Experts suggest that qualified enterprise users can disconnect unnecessary servers to prevent them from being attacked by the Bash vulnerability until the vulnerability is fixed.

OpenSSL TLS heartbeat read remote information leakage (CVE-2014-0160)

Severe OpenSSL bug allows attackers to read 64 KB of memory, fixed in half an hour in Debian

OpenSSL "heartbleed" Security Vulnerability

Provides FTP + SSL/TLS authentication through OpenSSL and implements secure data transmission.

This article permanently updates the link address: