> ## Content Index
> Fetch the complete content index at: https://www.frank.be/llms.txt
> Use this file to discover other available public pages before exploring further.

# Over die glibc "exploit"...
- URL: https://www.frank.be/over-die-glibc-exploit/
- Published: 2016-02-18T08:36:03.000Z
- Updated: 2026-06-21T17:37:30.000Z
- Author: Frank Louwers
- Tags: cve-2015-7547, don't panic

Over ["die glibc exploit"](https://googleonlinesecurity.blogspot.be/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html?ref=frank.be), bekend onder troetelnaampje CVE-2015-7547:

> The advisory mentions some mitigating factors: dropping UDP packets above 512 bytes, disabling edns0 like it's the 1980s and limiting TCP responses to 1024 bytes.

> With all due respect, these recommendations are terrible, and following them would be a significant regression in addition to breaking valid responses. It wouldn't be surprising if these recommendations made more actual damage than the vulnerability itself.

Eindelijk iemand die [ingaat tegen de massa-histerie](https://00f.net/2016/02/17/cve-2015-7547/?ref=frank.be) van gisteren. Dank u, Frank Denis!

Wat natuurlijk niet wil zeggen dat je niet moet patchen...