{"id":33301,"date":"2019-10-31T21:51:51","date_gmt":"2019-10-31T18:51:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root\/"},"modified":"2019-10-31T21:51:51","modified_gmt":"2019-10-31T18:51:51","slug":"docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root","title":{"rendered":"Dockerov\u00e9 obrazce Alpine byly dod\u00e1v\u00e1ny s pr\u00e1zdn\u00fdm heslem pro u\u017eivatele root","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edci ze spole\u010dnosti Cisco odhalili<\/a><\/noindex> informace o zranitelnosti (CVE-2019-5021) v builds<\/a><\/noindex> distribuci Alpine pro syst\u00e9m kontejnerov\u00e9 izolace Docker. Podstatou zji\u0161t\u011bn\u00e9ho probl\u00e9mu je to, \u017ee pro u\u017eivatele root byla nastavena jako v\u00fdchoz\u00ed pr\u00e1zdn\u00e1 heslo bez zablokov\u00e1n\u00ed p\u0159\u00edm\u00e9ho p\u0159ihla\u0161ov\u00e1n\u00ed jako root. P\u0159ipome\u0148me, \u017ee Alpine se pou\u017e\u00edv\u00e1 k vytv\u00e1\u0159en\u00ed ofici\u00e1ln\u00edch obraz\u016f projektu Docker (d\u0159\u00edve ofici\u00e1ln\u00ed sestaven\u00ed vych\u00e1zela z Ubuntu, ale pot\u00e9 byly p\u0159evedena<\/a><\/noindex> na Alpine).<\/p>\n

Probl\u00e9m se projevuje od verze Alpine Docker 3.3 a byl zp\u016fsoben regresivn\u00ed zm\u011bnou, kter\u00e1 byla p\u0159id\u00e1na v roce 2015 (p\u0159ed verz\u00ed 3.3 byla v \/etc\/shadow pou\u017eita \u0159\u00e1dka «root:!::0:::::», a po zastaven\u00ed pou\u017e\u00edv\u00e1n\u00ed p\u0159\u00edznaku «-d» se za\u010dala p\u0159id\u00e1vat \u0159\u00e1dka «root:::0:::::»). Probl\u00e9m byl p\u016fvodn\u011b odhalen a byla opraven\u00e1<\/a><\/noindex> v listopadu 2015, ale v prosinci byl omylem znovu se uk\u00e1zalo<\/a><\/noindex> v sestav\u00e1ch experiment\u00e1ln\u00ed v\u011btve a pot\u00e9 byl p\u0159eveden do stabiln\u00edch sestav.<\/p>\n

Ve zpr\u00e1v\u011b o zranitelnosti je uvedeno, \u017ee probl\u00e9m se projevuje tak\u00e9 v posledn\u00ed v\u011btvi Alpine Docker 3.9. V\u00fdvoj\u00e1\u0159i Alpine v b\u0159eznu vydal<\/a><\/noindex> opravili a zranitelnost neprojevuje<\/a><\/noindex> od sestav 3.9.2, 3.8.4, 3.7.3 a 3.6.5, ale z\u016fst\u00e1v\u00e1 ve star\u0161\u00edch v\u011btv\u00edch 3.4.x a 3.5.x, jejich\u017e podpora byla ji\u017e ukon\u010dena. Krom\u011b toho v\u00fdvoj\u00e1\u0159i tvrd\u00ed, \u017ee vektor \u00fatoku je siln\u011b omezen a vy\u017eaduje, aby \u00fato\u010dn\u00edk m\u011bl p\u0159\u00edstup ke stejn\u00e9 infrastruktu\u0159e.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-5021) \u0432 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Alpine \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Docker. \u0421\u0443\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root \u0431\u044b\u043b \u0437\u0430\u0434\u0430\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0443\u0441\u0442\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0431\u0435\u0437 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u043f\u043e\u0434 root. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e Alpine \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Docker (\u0440\u0430\u043d\u044c\u0448\u0435 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u043e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u043b\u0438\u0441\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33301","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dockerov\u00e9 obrazy Alpine se dod\u00e1valy s pr\u00e1zdn\u00fdm heslem pro u\u017eivatele root | ProHoster","description":"Bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edci z firmy Cisco zve\u0159ejnili informace o zranitelnosti (CVE-2019-5021) v.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Docker-\u043e\u0431\u0440\u0430\u0437\u044b Alpine \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-5021) \u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/docker-obrazy-alpine-postavlyalis-s-pustym-parolem-polzovatelya-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:51:51+00:00","article:modified_time":"2019-10-31T18:51:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33301","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 14:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:43:31","updated":"2026-01-21 14:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=33301"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33301\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=33301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=33301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=33301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}