{"id":106435,"date":"2023-01-21T12:48:20","date_gmt":"2023-01-21T10:48:20","guid":{"rendered":"https:\/\/prohoster.info\/?p=106435"},"modified":"2023-01-24T13:53:14","modified_gmt":"2023-01-24T11:53:14","slug":"uyazvimost-v-libxpm-privodyashhaya-k-vypolneniyu-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-libxpm-privodyashhaya-k-vypolneniyu-koda","title":{"rendered":"Zranitelnost v libXpm vedouc\u00ed k vykon\u00e1n\u00ed k\u00f3du","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Byla vyd\u00e1na oprava knihovny libXpm 3.5.15, kter\u00e1 je vyv\u00edjena projektem X.Org a pou\u017e\u00edv\u00e1 se pro zpracov\u00e1n\u00ed soubor\u016f ve form\u00e1tu XPM. Nov\u00e1 verze odstra\u0148uje t\u0159i zranitelnosti, z nich\u017e dv\u011b (CVE-2022-46285, CVE-2022-44617) vedou k zav\u011b\u0161en\u00ed p\u0159i zpracov\u00e1n\u00ed speci\u00e1ln\u011b vytvo\u0159en\u00fdch soubor\u016f XPM. T\u0159et\u00ed zranitelnost (CVE-2022-4883) umo\u017e\u0148uje spou\u0161t\u011bt libovoln\u00e9 p\u0159\u00edkazy p\u0159i prov\u00e1d\u011bn\u00ed aplikac\u00ed, kter\u00e9 pou\u017e\u00edvaj\u00ed libXpm. P\u0159i spu\u0161t\u011bn\u00ed privilegovan\u00fdch proces\u016f souvisej\u00edc\u00edch s libXpm, nap\u0159\u00edklad program\u016f s flagem suid root, tato zranitelnost umo\u017e\u0148uje zv\u00fd\u0161en\u00ed sv\u00fdch opr\u00e1vn\u011bn\u00ed. <\/p>\n

Zranitelnost je zp\u016fsobena specifikou fungov\u00e1n\u00ed libXpm se zkomprimovan\u00fdmi soubory XPM \u2014 p\u0159i zpracov\u00e1n\u00ed soubor\u016f XPM.Z nebo XPM.gz knihovna pomoc\u00ed vol\u00e1n\u00ed execlp() spou\u0161t\u00ed extern\u00ed dekompresn\u00ed n\u00e1stroje (uncompress nebo gunzip), jejich\u017e cesta je vypo\u010d\u00edt\u00e1na na z\u00e1klad\u011b prom\u011bnn\u00e9 prost\u0159ed\u00ed PATH. \u00datok spo\u010d\u00edv\u00e1 v um\u00edst\u011bn\u00ed vlastn\u00edch spustiteln\u00fdch soubor\u016f uncompress nebo gunzip do adres\u00e1\u0159e, kter\u00fd m\u00e1 u\u017eivatel k dispozici a kter\u00fd je zahrnut v seznamu PATH, co\u017e povede k jejich spu\u0161t\u011bn\u00ed p\u0159i zah\u00e1jen\u00ed aplikace vyu\u017e\u00edvaj\u00edc\u00ed libXpm. <\/p>\n

Zranitelnost byla odstran\u011bna nahrazen\u00edm vol\u00e1n\u00ed execlp za execl s pou\u017eit\u00edm absolutn\u00edch cest k n\u00e1stroj\u016fm. D\u00e1le byla p\u0159id\u00e1na mo\u017enost sestaven\u00ed \u201e\u2014disable-open-zfile\u201c, kter\u00e1 umo\u017e\u0148uje deaktivaci zpracov\u00e1n\u00ed zkomprimovan\u00fdch soubor\u016f a vol\u00e1n\u00ed extern\u00edch n\u00e1stroj\u016f pro dekompresi.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libXpm 3.5.15, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c X.Org \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 XPM. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (CVE-2022-46285, CVE-2022-44617) \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0437\u0430\u0446\u0438\u043a\u043b\u0438\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 XPM. \u0422\u0440\u0435\u0442\u044c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-4883) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 libXpm. \u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 libXpm \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106435","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnost v libXpm, vedouc\u00ed k vykon\u00e1v\u00e1n\u00ed k\u00f3du | ProHoster","description":"Byla vyd\u00e1na oprava knihovny libXpm 3.5.15, kter\u00e1 je vyv\u00edjena projektem X.Org a pou\u017e\u00edv\u00e1 se pro zpracov\u00e1n\u00ed soubor\u016f ve form\u00e1tu XPM.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-libxpm-privodyashhaya-k-vypolneniyu-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 libXpm, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libXpm 3.5.15, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c X.Org \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 XPM.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-libxpm-privodyashhaya-k-vypolneniyu-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-01-21T10:48:20+00:00","article:modified_time":"2023-01-24T11:53:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/106435","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=106435"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/106435\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=106435"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=106435"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=106435"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}