{"id":55016,"date":"2020-01-10T00:00:00","date_gmt":"2020-01-09T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-v-e2fsck-proyavlyayushhayasya-pri-obrabotke-spetsialno-oformlennyh-katalogov"},"modified":"2020-02-18T14:03:05","modified_gmt":"2020-02-18T11:03:05","slug":"uyazvimost-v-e2fsck-proyavlyayushhayasya-pri-obrabotke-spetsialno-oformlennyh-katalogov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/uyazvimost-v-e2fsck-proyavlyayushhayasya-pri-obrabotke-spetsialno-oformlennyh-katalogov","title":{"rendered":"e2fsck-d\u0259 x\u00fcsusi haz\u0131rlanm\u0131\u015f qovluqlar\u0131n i\u015fl\u0259nm\u0259si zaman\u0131 ortaya \u00e7\u0131xan z\u0259iflik.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

e2fsck al\u0259tind\u0259, e2fsprogs paketinin bir hiss\u0259si olaraq t\u0259qdim edilir. e2fsprogs<\/a><\/noindex>, k\u0259\u015ff edilib<\/a><\/noindex> z\u0259iflik<\/a><\/noindex> (CVE-2019-5188<\/a><\/noindex>), sistem fayl sisteminin x\u00fcsusi qovluqlar daxil olan fayllar\u0131n\u0131 yoxlama funksiyas\u0131 yerin\u0259 yetiril\u0259rk\u0259n h\u00fccum\u00e7unun kodunu icra etm\u0259sin\u0259 imkan tan\u0131yan z\u0259iflik. Z\u0259ifliyin 1.43.3-d\u0259n 1.45.4-\u0259 q\u0259d\u0259r olan versiyalarda m\u00f6vcud oldu\u011fu t\u0259sdiql\u0259nmi\u015fdir. Z\u0259iflik d\u00fcz\u0259ldildi. e2fsck 1.45.5<\/a><\/noindex>. Ditributivl\u0259rd\u0259 problem h\u0259l\u0259 d\u0259 h\u0259ll olunmam\u0131\u015fd\u0131r (Debian<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, RHEL<\/a><\/noindex>).<\/p>\n

Z\u0259iflik, directory hash c\u0259dv\u0259ll\u0259rini yenid\u0259n qurma prosesind\u0259 istifad\u0259 olunan mutate_name() funksiyas\u0131ndak\u0131 bir s\u0259hvd\u0259n ir\u0259l g\u0259lir ki, bu da qeyd edilib olan kataloqun i\u00e7ind\u0259 olan b\u00fct\u00fcn fayllarla uy\u011funlu\u011fu t\u0259min edir. Kataloqa ba\u011fl\u0131 hash_entry strukturunun pozulmas\u0131, h\u00fccum\u00e7unun m\u0259lumatlar\u0131n\u0131n ayr\u0131lm\u0131\u015f buferd\u0259n k\u0259narda yaz\u0131lmas\u0131na s\u0259b\u0259b ola bil\u0259r. Hash c\u0259dv\u0259lind\u0259 eyni adla bir ne\u00e7\u0259 fayl\u0131n olmas\u0131 v\u0259ziyy\u0259tind\u0259, e2fsck al\u0259ti t\u0259krarlanan fayllar\u0131 ad\u0131n sonuna ~0, ~1 v\u0259 s. \u0259lav\u0259 ed\u0259r\u0259k ad\u0131n\u0131 d\u0259yi\u015fir. Bel\u0259 bir yeniden adland\u0131rma \u00fc\u00e7\u00fcn y\u0131\u011f\u0131n \u00fcz\u0259rind\u0259 256 bayt \u00f6l\u00e7\u00fcs\u00fcnd\u0259 bir bufer ayr\u0131l\u0131r. <\/p>\n

Kopyalanan m\u0259lumatlar\u0131n \u00f6l\u00e7\u00fcs\u00fc «entry->name_len & 0xff» ifad\u0259si il\u0259 m\u00fc\u0259yy\u0259n edilir, lakin entry->name_len d\u0259y\u0259ri diskl\u0259 ba\u011fl\u0131 strukturdak\u0131 m\u0259lumatlardan y\u00fckl\u0259nir, faktiki ad\u0131n \u00f6l\u00e7\u00fcs\u00fcnd\u0259n deyil. \u018fg\u0259r \u00f6l\u00e7\u00fc s\u0131f\u0131rd\u0131rsa, massiv indeksinin d\u0259y\u0259ri -1 olur v\u0259 bu, tam \u0259d\u0259di a\u015f\u0131nma (integer underflow) v\u0259ziyy\u0259tl\u0259ri \u00fc\u00e7\u00fcn \u015f\u0259rtl\u0259r yarad\u0131r v\u0259 y\u0131\u011f\u0131nlardak\u0131 dig\u0259r m\u0259lumatlar\u0131n «~0» d\u0259y\u0259ri il\u0259 \u00fcst-\u00fcst\u0259 d\u00fc\u015fm\u0259si \u00fc\u00e7\u00fcn \u015f\u0259rait yarad\u0131r. 64 bitlik sisteml\u0259rd\u0259 bu z\u0259iflikd\u0259n yararlanma ehtimal\u0131 azd\u0131r v\u0259 y\u0131\u011f\u0131n \u00f6l\u00e7\u00fcs\u00fc \u00fcz\u0259rind\u0259 m\u0259hdudiyy\u0259tl\u0259rin olmamas\u0131n\u0131 (ulimit -s unlimited) t\u0259l\u0259b edir. 32 bitlik sisteml\u0259rd\u0259 is\u0259 bunun h\u0259yata ke\u00e7irilm\u0259si m\u00fcmk\u00fcnd\u00fcr, lakin n\u0259tic\u0259 a\u00e7\u0131q \u015f\u0259kild\u0259 icra olunan fayl\u0131n kompilator t\u0259r\u0259find\u0259n nec\u0259 haz\u0131rlanmas\u0131ndan as\u0131l\u0131d\u0131r.<\/p>\n

H\u00fccum\u00e7u \u00fc\u00e7\u00fcn h\u00fccumun h\u0259yata ke\u00e7irilm\u0259si \u00fc\u00e7\u00fcn ext2, ext3 v\u0259 ya ext4 FS b\u00f6lm\u0259sind\u0259ki m\u0259lumatlar\u0131 m\u00fc\u0259yy\u0259n \u015f\u0259kild\u0259 z\u0259d\u0259l\u0259m\u0259k laz\u0131md\u0131r. Bu \u0259m\u0259liyyat\u0131n superuser imtiyazlar\u0131 t\u0259l\u0259b etm\u0259si s\u0259b\u0259bind\u0259n z\u0259iflik, e2fsck al\u0259ti t\u0259r\u0259find\u0259n xarici y\u0131\u011f\u0131mlar\u0131n v\u0259 ya m\u0259nb\u0259d\u0259n \u0259ld\u0259 edil\u0259n FS obrazlar\u0131n\u0131n yoxlan\u0131lmas\u0131 zaman\u0131 t\u0259hl\u00fck\u0259 yarad\u0131r.<\/p>\n

<\/a><\/noindex><\/p>\n

M\u0259nb\u0259: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 e2fsck, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 e2fsprogs, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-5188), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438. \u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043e \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0441 1.43.3 \u043f\u043e 1.45.4. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 e2fsck 1.45.5. \u0412 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 (Debian, Arch Linux, SUSE\/openSUSE, Ubuntu, RHEL). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55016","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 e2fsck-d\u0259 x\u00fcsusi haz\u0131rlanm\u0131\u015f qovluqlar\u0131n i\u015fl\u0259nm\u0259si zaman\u0131 ortaya \u00e7\u0131xan z\u0259iflik | ProHoster","description":"e2fsck al\u0259tind\u0259, e2fsprogs paketinin bir hiss\u0259si olaraq t\u0259qdim edilir,","canonical_url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/uyazvimost-v-e2fsck-proyavlyayushhayasya-pri-obrabotke-spetsialno-oformlennyh-katalogov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 e2fsck, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0430\u044f\u0441\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 | ProHoster","og:description":"\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 e2fsck, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 e2fsprogs,","og:url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/uyazvimost-v-e2fsck-proyavlyayushhayasya-pri-obrabotke-spetsialno-oformlennyh-katalogov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-09T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55016","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 13:31:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:21:08","updated":"2026-01-24 13:31:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/55016","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=55016"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/55016\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=55016"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=55016"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=55016"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}