GHOST 2.0: What do you need to know about the glibc getaddrinfo vulnerability

  • Webcast Aired Friday, February 19, 2016 at 3:00 pm EDT (2016-02-19 20:00:00 UTC)
  • Speakers: Chris Eng, Johannes Ullrich, PhD

On Tuesday, the Google security team published a blog post with detailsabout a new vulnerability in glibc. The vulnerability affects 'getaddrinfo ',a modern replacement for 'gethostbyname ' which was the root cause of lastyears GHOST vulnerability. In this webcast, you will learn how to identifyvulnerable systems and what options you have available to mitigate thevulnerability in addition to patching. We will also cover some of theintricacies of DNS that contribute to the vulnerability and will help youbetter understand what went wrong in this case.