TeskaLabs’ Technology SeaCat Unaffected by GNU C Library Security Vulnerability (CVE-2015-7547)

GNU C Library (GLibC) security flaw puts nearly all Linux machines and Linux-based IoT devices at risk

Prague and London - Feb 17, 2016 - TeskaLabs, a Prague and London based startup in application security, today affirmed that their core products are not exposed to the GLibC flaw, a highly critical security vulnerability.

Hackers or cyber criminals have a reason to celebrate today. The recent bug found in the GNU C library, a key component in most Linux distributions, put a large number of Linux-based applications vulnerable to attacks. How soon will hackers exploit this vulnerability? Patch your affected application immediately.

As described in a Google Security blog post, the flaw enables a cyber attacker to gain control over the application by injecting a specially crafted network packet into the application. Since the vulnerable function is commonly used by applications, the impact of this issue is comparable to Heartbleed, a major OpenSSL bug that affected at least 17% of all Internet HTTP servers.

Aside from a large group of Linux-based server applications, there is now a rapidly growing number of IoT devices that use Linux as their operating system and inherently GLibC. These IoT devices are open to exploitation with this mechanism. Attackers can execute their code on any of those devices. They can build large bot networks or steal data from industrial and personal IoT devices. While server-based systems are relatively easy to patch, IoT devices lack such feature and patching this flaw is hard or even impossible.

We have millions of exploitable IoT devices scattered around the world. And they will be exploited. This type of attack can and will be automated.

Unlike unprotected applications that use GLibC, SeaCat-enabled applications (IoT or mobile) are unaffected because they do not use the function called getaddrinfo() from GLibC component libresolv. Instead, they use their own implementation of this function which is a part of the SeaCat SDK.

“Buffer overflow type of attacks stemmed from this GLibC vulnerability is a serious issue,” said Jiri Kohout, TeskaLabs VP of Application Security. “GNU C Library is widely used, and it is difficult to know all the applications that are affected. Moreover, the situation is becoming more urgent because there are code that people can download and execute to exploit this vulnerability. If you can not immediately update this library, limit TCP DNS replies to 1024 bytes and drop UDP DNS packets bigger than 512 bytes.”

The anatomy of an attack

buffer overflow glibc

Comparison between unprotected app and app secured by SeaCat

app protected by SeaCat against glibc

SeaCat is the core technology behind SeaCat Mobile Secure Gateway and IoT/M2M Application Security Platform, which protect mobile, IoT/M2M applications, the communication channel and application backends.

If your application is SeaCat-enabled, you are immune from this vulnerability, and you don’t need to take any action. If you are unsure, please contact us immediately.

About TeskaLabs

TeskaLabs, a mobile and IoT application security provider, help enterprises build and operate their Mobile and IoT applications safely. TeskaLabs’ application security platform offers an active, up-to-date security protection via software, hardware, and cloud based products. Our technology is simple for application developers to implement, provides visibility to information security officers and saves time for IT Admins. For more information, visit https://www.teskalabs.com and follow @TeskaLabs on Twitter.

###

Media contact :

Cindy Dam

Mobile: +44 0754 8674 986 (UK)

Email: cindy.dam@teskalabs.com

Build and release your iOS and Android apps with confidence.

Could we tell you more about our mobile app security audit?

Yes, tell me


You Might Be Interested in Reading These Articles

TeskaLabs Advances to Preferred Solution Partner Within the Cisco Solution Partner Program

TeskaLabs announced that it is now a Preferred Solution Partner within the Cisco® Solution Partner Program. The Internet of Everything (IoE) continues to bring together people, processes, data and things to enhance the relevancy of network connections. As a member of the Cisco Solution Partner Program, TeskaLabs is able to quickly create and deploy solutions to enhance the capabilities, performance and management of the network to capture value in the IoE.

Continue reading ...

press

Published on March 01, 2017

SeaCat Technology and the Latest OpenSSL Update (1.1.0d, 1.0.2k)

We help you to operate your mobile and IoT apps securely. You may have noticed that OpenSSL released a new version on 26 January 2017. The new release fixed one low-severity issue and three moderate ones.

Continue reading ...

bulletin

Published on January 26, 2017

TeskaLabs Secures €337 K in Pre-Seed Funding

TeskaLabs, a hi-tech security startup founded in Prague, with operations in London, announced today, exclusively through Forbes.cz, that it has secured €337,000 (CZK 9.1 million) in a pre-seed funding round, from a mix of private and institutional investors. TeskaLabs, which produces cutting edge enterprise-grade security for mobile and Internet of Things (IoT) applications, is backed by noted tech accelerators StartupYard Prague and Techstars London, and Credo Ventures, a European venture capital firm.

Continue reading ...

press

Published on August 19, 2015