Protect Vulnerable Shared Libraries with LibraryCare

To securely operate servers, it’s not enough to patch their Linux kernels. Their shared software libraries must be patched as well. Otherwise, an enterprise lays itself open to attacks that exploit vulnerabilities such as Heartbleed or GHOST. Enterprises usually deal with library vulnerabilities by rebooting their servers or restarting the applications. This causes downtime and windows of exposure. Admins rarely know the exact libraries that services were using, so they just reboot the whole server to update them.

If servers have been patched manually, shared libraries may still contain vulnerabilities without a reboot. When libraries are updated on disk, old unpatched files can persist in a server’s memory. Vulnerability scanners don’t detect these old unpatched library files in memory.