{"id":153102,"date":"2025-12-30T17:11:55","date_gmt":"2025-12-30T15:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-net-snmp-dopuskayushhaya-udalyonnoe-vypolnenie-koda"},"modified":"2025-12-30T17:11:55","modified_gmt":"2025-12-30T15:11:55","slug":"uyazvimost-v-net-snmp-dopuskayushhaya-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/news\/uyazvimost-v-net-snmp-dopuskayushhaya-udalyonnoe-vypolnenie-koda","title":{"rendered":"Net-SNMP-d\u0259, kodun uzaqdan icras\u0131na imkan ver\u0259n z\u0259iflik","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Net-SNMP paketind\u0259, SNMP v1, SNMP v2c v\u0259 SNMP v3 protokollar\u0131n\u0131 h\u0259yata ke\u00e7ir\u0259n bir t\u0259hl\u00fck\u0259sizlik z\u0259ifliyi (CVE-2025-68615) a\u015fkar edilib ki, bu da snmptrapd xidm\u0259tini istifad\u0259 ed\u0259n serverd\u0259 uzaqdan kod icras\u0131na s\u0259b\u0259b ola bil\u0259r. \u0130stifad\u0259 edildiyi zaman bu xidm\u0259t, cihazlardan trap mesajlar\u0131n\u0131 q\u0259bul etm\u0259k \u00fc\u00e7\u00fcn standart olaraq 162 UDP portunu dinl\u0259yir v\u0259 root h\u00fcquqlar\u0131 il\u0259 i\u015fl\u0259yir. Problemin kritik t\u0259hl\u00fck\u0259 d\u0259r\u0259c\u0259si 9.8\/10 olaraq qiym\u0259tl\u0259ndirilir. H\u00fccum autentifikasiya olmadan h\u0259yata ke\u00e7iril\u0259 bil\u0259r. <\/p>\n

Z\u0259iflik, OID \u00f6l\u00e7\u00fcs\u00fcn\u00fcn d\u00fczg\u00fcn yoxlan\u0131lmamas\u0131 s\u0259b\u0259bind\u0259n yaran\u0131r (\"trapOidLen >= 0\" \u0259v\u0259zin\u0259 \"trapOidLen > 0\") g\u00f6nd\u0259ril\u0259n paket m\u0259lumatlar\u0131n\u0131n sabit \u00f6l\u00e7\u00fcl\u00fc bufera kopyalanmas\u0131ndan \u0259vv\u0259l. X\u00fcsusi formada haz\u0131rlanm\u0131\u015f paketl\u0259rin g\u00f6nd\u0259rilm\u0259si, trapOid buferinin s\u0259rh\u0259dind\u0259n k\u0259nara m\u0259lumat yaz\u0131lmas\u0131na s\u0259b\u0259b ola bil\u0259r ki, bu da snmptrapd prosesi alt\u0131nda icra olunan h\u00fccum\u00e7unun kodunu icra etm\u0259k \u00fc\u00e7\u00fcn istismar edil\u0259 bil\u0259r. Z\u0259iflik, Net-SNMP 5.9.5 v\u0259 5.10.pre2 yenil\u0259m\u0259l\u0259rind\u0259 aradan qald\u0131r\u0131l\u0131b. \u018flav\u0259 t\u0259hl\u00fck\u0259sizlik \u00fc\u00e7\u00fcn, 162 n\u00f6mr\u0259li UDP portuna xarici \u015f\u0259b\u0259k\u0259l\u0259rd\u0259n daxil olma\u011f\u0131 bloklamaq t\u00f6vsiy\u0259 olunur.
\n
M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0430\u043a\u0435\u0442\u0435 Net-SNMP, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b SNMP v1, SNMP v2c \u0438 SNMP v3, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-68615), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441 snmptrapd \u0434\u043b\u044f \u043f\u0440\u0438\u0451\u043c\u0430 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 trap-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 162 UDP-\u043f\u043e\u0440\u0442\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u0438\u0437 10). \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-153102","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Net-SNMP-d\u0259 uzaqdan kod icras\u0131na yol a\u00e7an z\u0259iflik | ProHoster","description":"Net-SNMP paketind\u0259, SNMP v1, SNMP v2c v\u0259 SNMP v3 protokollar\u0131n\u0131 h\u0259yata ke\u00e7ir\u0259n bir t\u0259hl\u00fck\u0259sizlik z\u0259ifliyi (CVE-2025-68615) a\u015fkar edilib ki, bu da snmptrapd xidm\u0259tini istifad\u0259 ed\u0259n serverd\u0259 uzaqdan kod icras\u0131na s\u0259b\u0259b ola bil\u0259r.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/uyazvimost-v-net-snmp-dopuskayushhaya-udalyonnoe-vypolnenie-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Net-SNMP, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0412 \u043f\u0430\u043a\u0435\u0442\u0435 Net-SNMP, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b SNMP v1, SNMP v2c \u0438 SNMP v3, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-68615), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441 snmptrapd \u0434\u043b\u044f \u043f\u0440\u0438\u0451\u043c\u0430 \u0438.","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/uyazvimost-v-net-snmp-dopuskayushhaya-udalyonnoe-vypolnenie-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-30T15:11:55+00:00","article:modified_time":"2025-12-30T15:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"153102","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 13:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 13:55:19","updated":"2026-01-20 13:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/153102","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=153102"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/153102\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=153102"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=153102"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=153102"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}