Does memory protection protect servers from the heartbleed exploit?

眉间皱痕 提交于 2019-12-22 23:44:05

问题


I understand that the heartbleed-bug allows a remote attacker to read memory from your machine. Is this mitigated by memory protection?

For example, if I have a public-facing https webserver, any webserver traffic and data is obviously compromised, as well as any information accessible using credentials sent over the webserver. But what about other processes on the same box? If I was running bash locally from the console, far from ssl?


回答1:


According to the site Heartbleed only affects openssl and related software (like something linked to libssl). Any other program in your box should be safe from this particular bug.



来源:https://stackoverflow.com/questions/22973412/does-memory-protection-protect-servers-from-the-heartbleed-exploit

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!