{"id":105304,"date":"2022-10-13T21:36:48","date_gmt":"2022-10-13T19:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-besprovodnom-steke-yadra-linux-dopuskayushhie-udalyonnoe-vypolnenie-koda"},"modified":"2022-10-13T21:36:48","modified_gmt":"2022-10-13T19:36:48","slug":"uyazvimosti-v-besprovodnom-steke-yadra-linux-dopuskayushhie-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimosti-v-besprovodnom-steke-yadra-linux-dopuskayushhie-udalyonnoe-vypolnenie-koda","title":{"rendered":"S\u00e5rbarheder i Linux-kernens tr\u00e5dl\u00f8se stak, der muligg\u00f8r fjernudf\u00f8relse af kode","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
I det tr\u00e5dl\u00f8se stack (mac80211) af Linux-kernen er der identificeret en r\u00e6kke s\u00e5rbarheder, hvoraf nogle potentielt kan f\u00f8re til buffer-overflow og fjernudf\u00f8relse af kode gennem specielt designede pakker sendt fra et access point. En rettelse er i \u00f8jeblikket kun tilg\u00e6ngelig i form af en patch. <\/p>\n
For at demonstrere muligheden for at udf\u00f8re et angreb er der offentliggjort eksempler p\u00e5 frames, der for\u00e5rsager overflow, samt et v\u00e6rkt\u00f8j til at inds\u00e6tte disse frames i det tr\u00e5dl\u00f8se 802.11-stack. S\u00e5rbarhederne er uafh\u00e6ngige af de anvendte tr\u00e5dl\u00f8se drivere. Det antages, at de identificerede problemer kan bruges til at skabe fungerende exploits til fjernangreb p\u00e5 systemer. <\/p>\n
\n
CVE-2022-41674 \u2014 buffer overflow in the function cfg80211_update_notlisted_nontrans, allowing up to 256 bytes to be overwritten in the heap. The vulnerability appears starting with Linux kernel 5.1 and can be exploited for remote code execution.\n
CVE-2022-42719 \u2014 use-after-free access to already freed memory in the MBSSID parsing code. The vulnerability appears starting with Linux kernel 5.2 and can be exploited for remote code execution.\n
CVE-2022-42720 \u2014 use-after-free access to already freed memory in the link count code in Basic Service Set (BSS) mode. The vulnerability appears starting with Linux kernel 5.1 and can be exploited for remote code execution.\n
CVE-2022-42721 \u2014 corruption of the BSS list leading to infinite looping. The vulnerability appears starting with Linux kernel 5.1 and can be exploited for denial of service.\n
CVE-2022-42722 \u2014 dereferencing a null pointer in the beacon frame protection code. The issue can be exploited for denial of service. <\/ul>\n