{"id":115207,"date":"2024-04-21T02:30:03","date_gmt":"2024-04-21T00:30:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php"},"modified":"2024-04-21T02:30:03","modified_gmt":"2024-04-21T00:30:03","slug":"uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-glibc-ekspluatiruemaya-cherez-skripty-na-php","title":{"rendered":"Zranitelnost v Glibc, zneu\u017e\u00edvan\u00e1 prost\u0159ednictv\u00edm skript\u016f v PHP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
V b\u011b\u017en\u00e9 C knihovn\u011b Glibc byla zji\u0161t\u011bna zranitelnost (CVE-2024-2961), kter\u00e1 vede k p\u0159ete\u010den\u00ed z\u00e1sobn\u00edku p\u0159i konverzi speci\u00e1ln\u011b form\u00e1tovan\u00fdch \u0159et\u011bzc\u016f v k\u00f3dov\u00e1n\u00ed ISO-2022-CN-EXT funkc\u00ed iconv(). V\u00fdzkumn\u00edk, kter\u00fd probl\u00e9m odhalil, pl\u00e1nuje 10. kv\u011btna vystoupit na konferenci OffensiveCon se zpr\u00e1vou, v jej\u00edm\u017e ozn\u00e1men\u00ed se zmi\u0148uje mo\u017enost zneu\u017eit\u00ed zranitelnosti prost\u0159ednictv\u00edm aplikac\u00ed v jazyce PHP. Je uvedeno, \u017ee probl\u00e9m se t\u00fdk\u00e1 cel\u00e9ho ekosyst\u00e9mu PHP a n\u011bkter\u00fdch aplikac\u00ed. <\/p>\n
P\u0159i p\u0159evodu \u0159et\u011bzc\u016f v k\u00f3dov\u00e1n\u00ed UCS4, v souladu s po\u017eadavky RFC 1922, knihovna p\u0159id\u00e1v\u00e1 n\u011bkter\u00e9 escape znaky, kter\u00e9 vymezuj\u00ed \u010d\u00e1sti \u0159et\u011bzce, v nich\u017e bylo k\u00f3dov\u00e1n\u00ed zm\u011bn\u011bno. Zranitelnost je zp\u016fsobena nespr\u00e1vnou kontrolou hranic vnit\u0159n\u00edch buffer\u016f funkc\u00ed iconv(), co\u017e m\u016f\u017ee v\u00e9st k p\u0159ete\u010den\u00ed bufferu maxim\u00e1ln\u011b o 4 bajty. P\u0159i p\u0159ete\u010den\u00ed za tuto hranici mohou b\u00fdt zaps\u00e1ny ur\u010dit\u00e9 fixn\u00ed hodnoty, jako jsou '$+I', '$+J', '$+K', '$+L', '$+M' a '$*H'. A\u010dkoli se zd\u00e1, \u017ee vyu\u017eit\u00ed takov\u00e9 zranitelnosti pro proveden\u00ed k\u00f3du je nepravd\u011bpodobn\u00e9, podle tvrzen\u00ed v\u00fdzkumn\u00edka, kter\u00fd probl\u00e9m odhalil, to sta\u010dilo k p\u0159\u00edprav\u011b n\u011bkolika prototyp\u016f exploit\u016f pro vzd\u00e1len\u00fd \u00fatok na PHP aplikace, kter\u00fd vede k proveden\u00ed k\u00f3du. <\/p>\n
Zranitelnost se projevuje od roku 2000 a byla odstran\u011bna v n\u00e1turu Glibc 2.40, kter\u00e1 je pr\u00e1v\u011b ve v\u00fdvoji. Oprava je tak\u00e9 k dispozici jako z\u00e1platy pro vyd\u00e1n\u00ed Glibc od 2.32 do 2.39. V distribuc\u00edch je mo\u017en\u00e9 sledovat opravy zranitelnosti na str\u00e1nk\u00e1ch: Debian, Ubuntu, Gentoo, RHEL, SUSE, Fedora, Arch. \n Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"