{"id":125200,"date":"2025-05-20T03:05:16","date_gmt":"2025-05-20T01:05:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen"},"modified":"2025-05-20T03:05:16","modified_gmt":"2025-05-20T01:05:16","slug":"uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","title":{"rendered":"Zranitelnost v Glibc, kter\u00e1 se t\u00fdk\u00e1 staticky sestaven\u00fdch suid soubor\u016f s dlopen","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ve standardn\u00ed knihovn\u011b C Glibc byla odhalena zranitelnost (CVE-2025-4802), kter\u00e1 umo\u017e\u0148uje vykon\u00e1n\u00ed k\u00f3du s privilegii jin\u00e9ho u\u017eivatele, kter\u00e9 jsou ud\u011bleny p\u0159i spu\u0161t\u011bn\u00ed aplikac\u00ed s p\u0159\u00edznakem suid. Nebezpe\u010dnost probl\u00e9mu je zm\u00edrn\u011bna podm\u00ednkami, za kter\u00fdch se projevuje \u2014 v\u00fdvoj\u00e1\u0159i Glibc se nepoda\u0159ilo naj\u00edt \u017e\u00e1dn\u00fd suid program, na kter\u00fd by bylo mo\u017en\u00e9 nal\u00e9zt zranitelnost. Vylou\u010deno v\u0161ak nen\u00ed, \u017ee v praxi mohou existovat vlastn\u00ed suid programy spl\u0148uj\u00edc\u00ed podm\u00ednky pro proveden\u00ed \u00fatoku. <\/p>\n

Exploatace zranitelnosti je mo\u017en\u00e1 pouze u staticky sestaven\u00fdch suid-program\u016f, kter\u00e9 volaj\u00ed funkci dlopen. Krom\u011b program\u016f, kter\u00e9 p\u0159\u00edmo volaj\u00ed dlopen, se zranitelnost t\u00fdk\u00e1 i program\u016f, ve kter\u00fdch je funkce dlopen vykon\u00e1v\u00e1na nep\u0159\u00edmo, jako d\u016fsledek vol\u00e1n\u00ed setlocale nebo funkc\u00ed NSS, jako je getaddrinfo. <\/p>\n

Probl\u00e9m je zp\u016fsoben zpracov\u00e1n\u00edm prom\u011bnn\u00e9 prost\u0159ed\u00ed LD_LIBRARY_PATH v kontextu suid-aplikac\u00ed v p\u0159\u00edpad\u011b vol\u00e1n\u00ed dlopen z staticky sestaven\u00fdch program\u016f (ignorov\u00e1n\u00ed LD_LIBRARY_PATH fungovalo pouze p\u0159i dynamick\u00e9m sestaven\u00ed). Nastaven\u00edm cesty v LD_LIBRARY_PATH m\u016f\u017ee \u00fato\u010dn\u00edk iniciovat na\u010dten\u00ed podvr\u017een\u00e9 knihovny ze sv\u00e9ho adres\u00e1\u0159e. Zranitelnost se projevuje od verze Glibc 2.27 (\u00fanor 2018) a byla odstran\u011bna v vyd\u00e1n\u00ed Glibc 2.39 (\u00fanor 2024).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Glibc \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-4802), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c suid. \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u043e\u0434\u044f\u0442 \u043d\u0430 \u043d\u0435\u0442 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043d\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f — \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Glibc \u043d\u0430 \u0441\u043c\u043e\u0433\u043b\u0438 \u043d\u0430\u0439\u0442\u0438 \u043d\u0435 \u043e\u0434\u043d\u043e\u0439 suid-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0430 \u0431\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432 \u043e\u0431\u0438\u0445\u043e\u0434\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-125200","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnost v Glibc, kter\u00e1 se t\u00fdk\u00e1 staticky sestaven\u00fdch suid-soubor\u016f s dlopen | ProHoster","description":"Ve standardn\u00ed knihovn\u011b C Glibc byla objevena zranitelnost (CVE-2025-4802), kter\u00e1 umo\u017e\u0148uje prov\u00e1d\u011bt k\u00f3d s privilegii jin\u00e9ho u\u017eivatele, p\u0159id\u011blen\u00fdmi p\u0159i spu\u0161t\u011bn\u00ed aplikac\u00ed s ozna\u010den\u00edm suid.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Glibc, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 suid-\u0444\u0430\u0439\u043b\u044b \u0441 dlopen | ProHoster","og:description":"\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0421\u0438-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Glibc \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-4802), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c suid.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-20T01:05:16+00:00","article:modified_time":"2025-05-20T01:05:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"125200","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 12:53:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:53:19","updated":"2026-01-23 12:53:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/125200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=125200"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/125200\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=125200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=125200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=125200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}