{"id":107183,"date":"2023-03-10T18:48:11","date_gmt":"2023-03-10T16:48:11","guid":{"rendered":"https:\/\/prohoster.info\/?p=107183"},"modified":"2023-03-13T12:06:39","modified_gmt":"2023-03-13T10:06:39","slug":"kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","title":{"rendered":"Vulnerabilidad cr\u00edtica en Wasmtime, runtime para aplicaciones WebAssembly.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En las actualizaciones correctivas de Wasmtime 6.0.1, 5.0.1 y 4.0.1 se ha solucionado una vulnerabilidad (CVE-2023-26489), a la que se le ha asignado un nivel cr\u00edtico de peligrosidad. La vulnerabilidad permite escribir datos en \u00e1reas de memoria fuera de los l\u00edmites permitidos para el c\u00f3digo WebAssembly aislado, lo que podr\u00eda ser potencialmente explotado por un atacante para ejecutar su c\u00f3digo fuera del entorno aislado de WASI. <\/p>\n

Wasmtime es un runtime para ejecutar aplicaciones WebAssembly con extensiones WASI (Interfaz de Sistema WebAssembly) como aplicaciones aisladas convencionales. El conjunto de herramientas est\u00e1 escrito en Rust, y la vulnerabilidad se debe a un error l\u00f3gico en la determinaci\u00f3n de las reglas de direccionamiento lineal de la memoria en el generador de c\u00f3digo Cranelift, que traduce una representaci\u00f3n intermedia independiente de la arquitectura de hardware a c\u00f3digo de m\u00e1quina ejecutable para la arquitectura x86_64. <\/p>\n

En particular, se calcularon direcciones efectivas de 35 bits para aplicaciones WebAssembly en lugar de las direcciones de 33 bits permitidas en WebAssembly, aumentando as\u00ed el l\u00edmite permitido para operaciones de lectura y escritura de memoria virtual hasta 34 GB, mientras que la configuraci\u00f3n del entorno sandbox proporciona protecci\u00f3n para 6 GB desde la direcci\u00f3n base. Como resultado, el rango de memoria virtual de 6 a 34 GB desde la direcci\u00f3n base quedaba accesible para lectura y escritura desde aplicaciones WebAssembly. En esta memoria pueden residir otros entornos WebAssembly o componentes del runtime WebAssembly. <\/p>\n

En caso de no poder actualizar la versi\u00f3n de Wasmtime, se sugiere como soluci\u00f3n alternativa establecer la opci\u00f3n «Config::static_memory_maximum_size(0)» para habilitar una verificaci\u00f3n de l\u00edmites independiente obligatoria en cualquier acceso a la memoria lineal (lo que resulta en una disminuci\u00f3n significativa del rendimiento). Otra opci\u00f3n es utilizar la configuraci\u00f3n «Config::static_memory_guard_size(1 < 36)» para aumentar el n\u00famero de p\u00e1ginas de memoria de guardia (Guard Page, se genera una excepci\u00f3n al acceder), colocadas en el rango problem\u00e1tico de la memoria virtual (lo que conduce a la reserva de un gran volumen de memoria virtual y limita el n\u00famero de aplicaciones WebAssembly que se pueden ejecutar simult\u00e1neamente).
\n
Fuente: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 Wasmtime 6.0.1, 5.0.1 \u0438 4.0.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-26489), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446\u044b, \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0439 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e WebAssembly-\u043a\u043e\u0434\u0430, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f WASI. Wasmtime \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 runtime \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f WebAssembly-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 WASI […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107183","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidad cr\u00edtica en Wasmtime, runtime para aplicaciones WebAssembly | ProHoster","description":"En las actualizaciones correctivas de Wasmtime 6.0.1, 5.0.1 y 4.0.1 se ha solucionado una vulnerabilidad (CVE-2023-26489) que se clasifica como cr\u00edtica.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wasmtime, runtime \u0434\u043b\u044f WebAssembly-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 Wasmtime 6.0.1, 5.0.1 \u0438 4.0.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-26489), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/kriticheskaya-uyazvimost-v-wasmtime-runtime-dlya-webassembly-prilozhenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-03-10T16:48:11+00:00","article:modified_time":"2023-03-13T10:06:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/107183","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=107183"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/107183\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=107183"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=107183"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=107183"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}