Recently Google discovered the "glibc getaddrinfo" vulnerability (CVE-2015-7547).

Does this vulnerability affect Windows systems at all? I think it might because I'm not sure that glibc is a Linux-only piece of software. It might be able to be part of a Windows software or it might run emulated on Windows (Cygwin?!). I have searched for "glibc windows" but the search results are inconclusive to me.

Is this concern valid at all?

up vote 1 down vote accepted

Concern is largely unfounded as the glibc (GNU C library) https://en.wikipedia.org/wiki/GNU_C_Library is utilized on the *nix platforms and is not part of the native Windows environment.

If you are running Cywin or any other Linux emulator, you might want to go ahead, patch and reboot

If you are using a vulnerable version of glibc in windows, then yes. It is vulnerable. Of course glibc is not commonly used in the windows environment.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.