# Dirty Cow Vulnerability CVE-2016-5195

**URL:** <https://discourse.mailinabox.email/t/dirty-cow-vulnerability-cve-2016-5195/1601>\
**Category:** Announcements\
**Created:** [October 27, 2016, 2:49pm UTC](https://discourse.mailinabox.email/t/dirty-cow-vulnerability-cve-2016-5195/1601 "2016-10-27T14:49:51Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![JoshData](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/joshdata/32/2153_2.png) [@JoshData](https://discourse.mailinabox.email/u/JoshData)\
**Post date:** [October 27, 2016, 2:49pm UTC](https://discourse.mailinabox.email/t/dirty-cow-vulnerability-cve-2016-5195/1601/1 "2016-10-27T14:49:52Z")

</div>

A new Linux kernel vulnerability called [Dirty Cow (CVE-2016-5195)](https://dirtycow.ninja/) was announced. It affects certain versions of the Linux kernel.

Whether it affects your box will depend on your server provider.

If your Mail-in-a-Box is running on bare metal (i.e. it’s not a virtualized server), then you are probably affected because you are probably running the stock Ubuntu 14.04 kernel. If you are running a virtualized server, your provider will probably have instructions for you.

To check your box, log into your Mail-in-a-Box with SSH (like when you installed Mail-in-a-Box) and run `uname -rv`:

```
$ uname -rv
3.13.0-34-generic #60-Ubuntu SMP Wed Aug 13 15:45:27 UTC 2014

```

Kernel versions 3.xx (like this one, 3.13.0-34) are vulnerable until you get a `-100` version kernel. (I’m not sure about 4.x kernel versions — can anyone help out here?)

If you have a vulnerable kernel version, upgrade your kernel:

```
$ sudo apt-get update
$ sudo apt-get upgrade linux-image-generic

```

Afterwards, reboot your box:

```
$ sudo reboot

```

Then check your kernel version again:

```
$ uname -rv
3.13.0-100-generic #147-Ubuntu SMP Tue Oct 18 16:48:51 UTC 2016

```

You should see `-100` in the version now and that means you’re good.

---

<div class="post-metadata">

**Author:** ![netoperatorwibby](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/netoperatorwibby/32/546_2.png) [@netoperatorwibby](https://discourse.mailinabox.email/u/netoperatorwibby)\
**Post date:** [October 27, 2016, 3:11pm UTC](https://discourse.mailinabox.email/t/dirty-cow-vulnerability-cve-2016-5195/1601/2 "2016-10-27T15:11:08Z")

</div>

This doesn’t work for me on DigitalOcean, my version doesn’t change. I get

`3.13.0-52-generic #85-Ubuntu SMP Wed Apr 29 16:44:17 UTC 2015`

---

<div class="post-metadata">

**Author:** ![pxl](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/pxl/32/461_2.png) [@pxl](https://discourse.mailinabox.email/u/pxl)\
**Post date:** [October 27, 2016, 5:38pm UTC](https://discourse.mailinabox.email/t/dirty-cow-vulnerability-cve-2016-5195/1601/3 "2016-10-27T17:38:06Z")

</div>

worked fine for me, thanks

---

<div class="post-metadata">

**Author:** ![Orwell84\_](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/orwell84_/32/40_2.png) [@Orwell84\_](https://discourse.mailinabox.email/u/Orwell84_)\
**Post date:** [October 27, 2016, 7:32pm UTC](https://discourse.mailinabox.email/t/dirty-cow-vulnerability-cve-2016-5195/1601/4 "2016-10-27T19:32:17Z")

</div>

Thanks for the heads-up!

---

<div class="post-metadata">

**Author:** ![haroldus](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/h/c68b51/32.png) [@haroldus](https://discourse.mailinabox.email/u/haroldus)\
**Post date:** [October 28, 2016, 3:06am UTC](https://discourse.mailinabox.email/t/dirty-cow-vulnerability-cve-2016-5195/1601/5 "2016-10-28T03:06:23Z")

</div>

You might need to switch to internal kernel management:

[https://serverpilot.io/community/articles/switch-old-digitalocean-servers-to-new-kernel-management.html](https://serverpilot.io/community/articles/switch-old-digitalocean-servers-to-new-kernel-management.html)

(which worked for me)

---

<div class="post-metadata">

**Author:** ![netoperatorwibby](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/netoperatorwibby/32/546_2.png) [@netoperatorwibby](https://discourse.mailinabox.email/u/netoperatorwibby)\
**Post date:** [October 28, 2016, 3:58am UTC](https://discourse.mailinabox.email/t/dirty-cow-vulnerability-cve-2016-5195/1601/6 "2016-10-28T03:58:21Z")

</div>

That worked, thank you!

---

<div class="post-metadata">

**Author:** ![JoshData](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/joshdata/32/2153_2.png) [@JoshData](https://discourse.mailinabox.email/u/JoshData)\
**Post date:** [November 3, 2016, 3:58am UTC](https://discourse.mailinabox.email/t/dirty-cow-vulnerability-cve-2016-5195/1601/7 "2016-11-03T03:58:28Z")

</div>

This topic was automatically closed 6 days after the last reply. New replies are no longer allowed.