{"id":105776,"date":"2022-12-01T15:37:11","date_gmt":"2022-12-01T13:37:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd"},"modified":"2022-12-01T15:37:11","modified_gmt":"2022-12-01T13:37:11","slug":"udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","title":{"rendered":"Kaugt\u00f6\u00f6tlemise root-haavatavus ping utiliidis, mis on pakendatud FreeBSD-ga","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

FreeBSD-s on avastatud haavu (CVE-2022-23093) ping utiliidis, mis kuulub p\u00f5hitoote hulka. Probleem v\u00f5ib potentsiaalselt viia koodi kaugteostamiseni root-\u00f5igustega, kui kontrollitakse v\u00e4lise hosti kaudu, mida haldab r\u00fcndaja. Parandus on pakkuda FreeBSD v\u00e4rskendustes 13.1-RELEASE-p5, 12.4-RC2-p2 ja 12.3-RELEASE-p10. Kas teised BSD s\u00fcsteemid on haavatavad, pole veel selge (raporteid NetBSD, DragonFlyBSD ja OpenBSD haavatavuste kohta pole veel esitatud). <\/p>\n

Haavatavus on p\u00f5hjustatud puhver \u00fcleujutusest ICMP-s\u00f5numite anal\u00fc\u00fcsi koodis, mis saabuvad vastuseks kontrollp\u00e4ringule. ICMP-s\u00f5numite saatmise ja vastuv\u00f5tmise kood pingis kasutab raw-sokette ja t\u00f6\u00f6tab v\u00e4lja k\u00f5rgendatud privileegidega (utiliit on varustatud setuid root lipuga). Vastuse t\u00f6\u00f6tlemine toimub pingis, rekonstruerides saadud IP- ja ICMP-pakettide pealkirju, mis saavad raw-soketist. Eraldatud IP- ja ICMP-pealkirjad kopeeritakse funktsiooniga pr_pack() puhvidesse, mitte arvestades, et IP-pealkirja j\u00e4rel v\u00f5ib paketis esineda t\u00e4iendavaid laiendatud pealkirju. <\/p>\n

Sarnased p\u00e4ised eraldatakse paketist ja lisatakse p\u00e4iste plokki, kuid neid ei arvestata puhversuva suuruse arvutamisel. Kui host vastab saadetud ICMP-p\u00e4ringule paketi lisap\u00e4istega, salvestatakse nende sisu puhvri piiridest v\u00e4ljapoole steki. Selle tulemusena saab r\u00fcndaja kirjutada steki kuni 40 baitiv\u00e4\u00e4rt abitoodet, mis potentsiaalselt v\u00f5imaldab oma koodi k\u00e4ivitada. Probleemi ohtlikkust leevendab see, et vea ilmnemise hetkel on protsess isoleeritud s\u00fcsteemi kutsungite olekus (capability mode), mis keerustab juurdep\u00e4\u00e4su \u00fclej\u00e4\u00e4nud s\u00fcsteemile p\u00e4rast haavatavuse \u00e4rakasutamist.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043e FreeBSD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-23093) \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 ping, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 ping \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0445\u043e\u0441\u0442\u0430, \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 13.1-RELEASE-p5, 12.4-RC2-p2 \u0438 12.3-RELEASE-p10. \u041f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 BSD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u044f\u0441\u043d\u043e (\u043e\u0442\u0447\u0451\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NetBSD, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105776","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kaugjuhtimisega root-haavatavus FreeBSD-ga tarnitud ping utiliidis | ProHoster","description":"FreeBSD-s on tuvastatud haavatavus (CVE-2022-23093) ping utiliidis, mis kuulub baaspaketti.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 ping, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0432\u043e FreeBSD | ProHoster","og:description":"\u0412\u043e FreeBSD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-23093) \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 ping, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-01T13:37:11+00:00","article:modified_time":"2022-12-01T13:37:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105776","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=105776"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105776\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=105776"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=105776"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=105776"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}