FreeBSD-s avastuses on tuvastatud haavatavus (CVE-2022-23093) ping utiliidis, mis kuulub p\u00f5hitarne hulka. Probleem v\u00f5ib potentsiaalselt viia koodi kaugele t\u00e4itmisele root \u00f5igustega, kui kontrollitakse v\u00e4lise hosti kaudu, mis on pahatahtlike k\u00e4e all. Parandus on ette n\u00e4htud FreeBSD versioonides 13.1-RELEASE-p5, 12.4-RC2-p2 ja 12.3-RELEASE-p10. Pole veel selge, kas muud BSD s\u00fcsteemid on selle haavatavuse suhtes samuti vastuv\u00f5tlikud (NetBSD, DragonFlyBSD ja OpenBSD kohta pole seni teatatud haavatavustest). <\/p>\n
Haavatavus on p\u00f5hjustatud vahem\u00e4lu \u00fcletamisest ICMP-s\u00f5numite t\u00f5lgendamise koodis, mis saabuvad vastusena kontrollpingele. ICMP-s\u00f5numite saatmine ja vastuv\u00f5tt ping utiliidis kasutab raw-sokette ning tehakse t\u00f5stetud \u00f5igustega (utiliit tarnitakse setuid root lipuga). Vastuse t\u00f6\u00f6tlemine toimub ping utiliidi poolt, reconstruerides paketid IP- ja ICMP-p\u00e4iste kaudu, mis saadakse raw-soketist. Eraldatud IP- ja ICMP-p\u00e4ised kopeeritakse funktsiooniga pr_pack() vahem\u00e4ludesse, arvestamata sellega, et IP-p\u00e4ise taha v\u00f5ivad j\u00e4\u00e4da lisap\u00e4ised. <\/p>\n
Sellised p\u00e4ised eraldatakse paketist ja lisatakse p\u00e4iste plokki, kuid ei arvestata vahem\u00e4lu suuruse arvutamisel. Kui host vastab saadetud ICMP-p\u00e4ringule paketiga, mis sisaldab lisa p\u00e4iseid, kirjutatakse nende sisu vahem\u00e4lust v\u00e4lja. Tulemuseks on see, et r\u00fcndaja v\u00f5ib kirjutada kuni 40 baiti andmeid vahem\u00e4lus, mis v\u00f5imaldab potentsiaalselt oma koodi t\u00e4itmist. Probleemi oht on pehmendatud, kuna vea ilmnemise hetkedel on protsess s\u00fcsteemi kutsungite isolatsiooni olekus (capability mode), mis raskendab muu s\u00fcsteemi juurde p\u00e4\u00e4semist p\u00e4rast haavatavuse \u00e4rakasutamist. \u0412\u043e FreeBSD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-23093) \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 ping, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 ping \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0445\u043e\u0441\u0442\u0430, \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 13.1-RELEASE-p5, 12.4-RC2-p2 \u0438 12.3-RELEASE-p10. \u041f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 BSD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u044f\u0441\u043d\u043e (\u043e\u0442\u0447\u0451\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NetBSD, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105776","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kaugt\u00f6\u00f6tlemisega root-haavatavus FreeBSD-s tarnitud ping utiliidis | ProHoster","description":"FreeBSD-s on tuvastatud haavatavus (CVE-2022-23093) ping utiliidis, mis kuulub p\u00f5hitarne hulka.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 ping, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u0432\u043e FreeBSD | ProHoster","og:description":"\u0412\u043e FreeBSD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-23093) \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 ping, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/udalyonno-ekspluatiruemaya-root-uyazvimost-v-utilite-ping-postavlyaemoj-vo-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-01T13:37:11+00:00","article:modified_time":"2022-12-01T13:37:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105776","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=105776"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105776\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=105776"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=105776"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=105776"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"