GHOST vulnerability mitigated

Incident Report for mailgun

Resolved

Mailgun has patched all infrastructure against the recently account GHOST security vulnerability [1]. We have monitored our logs and have no reason to believe an attacker exploited our infrastructure, this was an entirely a preventive measure. No customer data was lost or affected.

We recommend all customers review and patch their infrastructure accordingly as well.

[1] GHOST is a security vulnerability in the gethostbyname*() family of functions of GNU C Library (glibc). This particular vulnerability allows an attacker to potentially take over a server via both a local or remote exploit. More information can be obtained from the following link: http://www.openwall.com/lists/oss-security/2015/01/27/9

Posted Jan 27, 2015 - 18:32 PST