2

Recently Google discovered the "glibc getaddrinfo" vulnerability (CVE-2015-7547).

Does this vulnerability affect Windows systems at all? I think it might because I'm not sure that glibc is a Linux-only piece of software. It might be able to be part of a Windows software or it might run emulated on Windows (Cygwin?!). I have searched for "glibc windows" but the search results are inconclusive to me.

Is this concern valid at all?

1

Concern is largely unfounded as the glibc (GNU C library) https://en.wikipedia.org/wiki/GNU_C_Library is utilized on the *nix platforms and is not part of the native Windows environment.

If you are running Cywin or any other Linux emulator, you might want to go ahead, patch and reboot

2

If you are using a vulnerable version of glibc in windows, then yes. It is vulnerable. Of course glibc is not commonly used in the windows environment.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.