{"id":110745,"date":"2023-10-11T21:10:17","date_gmt":"2023-10-11T19:10:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/perepolnenie-bufera-v-curl-i-libcurl-proyavlyayushheesya-pri-obrashhenii-cherez-socks5-proksi"},"modified":"2023-10-11T21:10:17","modified_gmt":"2023-10-11T19:10:17","slug":"perepolnenie-bufera-v-curl-i-libcurl-proyavlyayushheesya-pri-obrashhenii-cherez-socks5-proksi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/perepolnenie-bufera-v-curl-i-libcurl-proyavlyayushheesya-pri-obrashhenii-cherez-socks5-proksi","title":{"rendered":"Puhveri \u00fcletamine curlis ja libcurlis, mis avaldub SOCKS5-proksi kaudu p\u00e4ringute tegemisel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Andmete edastamiseks ja vastuv\u00f5tmiseks m\u00f5eldud utiliidis curl ja samal ajal arenevas raamatukogus libcurl avastati haavatavus (CVE-2023-38545), mis v\u00f5ib viia puhveri \u00fcletamiseni ja potentsiaalselt koodide t\u00e4itmisse r\u00fcndaja poolt kliendipoolsel k\u00fcljel, kui utiliit curl v\u00f5i rakendus, mis kasutab libcurl-i, p\u00f6\u00f6rdub HTTPS-serveri poole, mis on kurjategija kontrolli all. Probleem avaldub ainult siis, kui curlis on sisse l\u00fclitatud juurdep\u00e4\u00e4s SOCKS5-proksi kaudu. Otsese p\u00e4ringu korral ilma proksita haavatavust ei esine. Haavatavus on k\u00f5rvaldatud curl versioonis 8.4.0. Vea avastanud turvauurijale anti $4660 suurune preemia Internet Bug Bounty algatuse raames Hackerone'is. <\/p>\n

Haavatavus on p\u00f5hjustatud veast hostinime lahendamise koodis enne p\u00f6\u00f6rdumist SOCKS5-proksi. Kui hostinimi on kuni 256 m\u00e4rke, edastab curl nime kohe SOCKS5-proksile lahendamiseks sellel poolel, ja kui nimi on pikem kui 255 m\u00e4rki, l\u00fclitub ta kohaliku resolvri kasutamisele ja edastab SOCKS5-le juba m\u00e4\u00e4ratud aadressi. Koodivea t\u00f5ttu v\u00f5is aeglase SOCKS5-\u00fchenduse seadistamise k\u00e4igus vale v\u00e4\u00e4rtus saada flagg, mis n\u00e4itab, et kohalikku lahendamist on vaja, mis viis pika hostinime kirjutamiseni puhvrisse, mis oli ette n\u00e4htud salvestamiseks IP-aadressid<\/a> v\u00f5i nimele, mis ei \u00fcleta 255 m\u00e4rki. <\/p>\n

Veebisaidi omanik, kellele curl p\u00f6\u00f6rdub l\u00e4bi SOCKS5-proksi, v\u00f5ib algatada puhver\u00fclevuse kliendipoolse vahendi, tagastades vastusena p\u00e4ringu suunamise koodi (HTTP 30x) ja seadistades pealkirjas «Location:» URL-i, mille hostinimi on vahemikus 16 kuni 64 KB (16 KB v\u00e4\u00e4rtus on tingitud minimaalsetest n\u00f5uetest, mis on vajalikud eraldatud puhveri \u00fclevuseks, ja 65 KB v\u00e4\u00e4rtus on seotud URL-is lubatud hostinime maksimaalse pikkusega). Kui libcurl-i seadetes on lubatud p\u00e4ringute suunamine ja kasutatav SOCKS5-proksi on piisavalt aeglane, siis kirjutatakse pika hostinime v\u00e4iksemasse puhverisse, mille suurus on teadlikult v\u00e4iksem. <\/p>\n

Haavatavus m\u00f5jutab peamiselt libcurl-p\u00f5hiseid rakendusi ja ilmneb curl-teenuses ainult «—limit-rate» valiku kasutamisel v\u00e4\u00e4rtusega, mis on v\u00e4iksem kui 65541 — libcurl-is eraldatakse vaikimisi puhver, mille suurus on 16 KB, ja curl-teenuses — 100 KB, kuid see suurus muutub s\u00f5ltuvalt «—limit-rate» parameetri v\u00e4\u00e4rtusest. <\/p>\n

Daniel Stenberg, projekti autor, mainis, et haavatavus j\u00e4i m\u00e4rkamatuks 1315 p\u00e4eva jooksul. Samuti \u00f6eldi, et 41% varasematest curl'i haavatavustest oleks t\u00f5en\u00e4oliselt saanud v\u00e4ltida, kui curl oleks kirjutatud keeles, mis tagab m\u00e4luga ohutu t\u00f6\u00f6, kuid curl'i \u00fcmberkirjutamist teise keelde l\u00e4hitulevikus ei plaanita. Koodibaasi turvalisuse suurendamiseks soovitatakse laiendada koodi testimise t\u00f6\u00f6riistu ja kasutada aktiivsemalt s\u00f5ltuvusi, mis on kirjutatud m\u00e4luga ohututesse programmeerimiskeeltesse. Samuti kaalutakse curl'i osade j\u00e4rkj\u00e4rgulist asendamist turvalistes keeltes kirjutatud variantidega, nagu katseprojekt HTTP-tagaplaan Hyper, mis on rakendatud Rust keeles.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0442\u0438 curl \u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcurl \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-38545), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u044b curl \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e libcurl, \u043a HTTPS-\u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 curl […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110745","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Puhversalvamine curl'is ja libcurl'is, mis ilmneb SOCKS5-proksi kaudu p\u00f6\u00f6rdudes | ProHoster","description":"Andmete edastamise ja saatmise utiliidis curl ja samaaegselt arenevas raamatukogus libcurl avastati haavatavus (CVE-2023-38545), mis v\u00f5ib viia puhversalvamise ja potentsiaalselt t\u00e4itmiseni.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/perepolnenie-bufera-v-curl-i-libcurl-proyavlyayushheesya-pri-obrashhenii-cherez-socks5-proksi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 curl \u0438 libcurl, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0435\u0441\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 SOCKS5-\u043f\u0440\u043e\u043a\u0441\u0438 | ProHoster","og:description":"\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0442\u0438 curl \u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcurl \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-38545), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/perepolnenie-bufera-v-curl-i-libcurl-proyavlyayushheesya-pri-obrashhenii-cherez-socks5-proksi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-11T19:10:17+00:00","article:modified_time":"2023-10-11T19:10:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110745","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:24:09","updated":"2026-02-08 20:24:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/110745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=110745"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/110745\/revisions"}],"predecessor-version":[{"id":157908,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/110745\/revisions\/157908"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=110745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=110745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=110745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}