{"id":113232,"date":"2024-01-29T18:50:31","date_gmt":"2024-01-29T16:50:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ipv6-steke-yadra-linux-dopuskayushhaya-udalyonnoe-vypolnenie-koda"},"modified":"2024-01-29T18:50:31","modified_gmt":"2024-01-29T16:50:31","slug":"uyazvimost-v-ipv6-steke-yadra-linux-dopuskayushhaya-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-ipv6-steke-yadra-linux-dopuskayushhaya-udalyonnoe-vypolnenie-koda","title":{"rendered":"Vigastus IPv6-tuges Linuxi tuumas, mis v\u00f5imaldab kaugjuhtimist koodi k\u00e4ivitada","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Avanenud teave Linuxi tuuma v\u00f5rgustiku virde CVE-2023-6200 haavatavuse kohta, mis teatud tingimustel v\u00f5imaldab r\u00fcndajal kohalikust v\u00f5rgust oma koodi k\u00e4ivitada, saates spetsiaalselt vormindatud ICMPv6 paketi, mis sisaldab RA (Router Advertisement) s\u00f5numit, mis on m\u00f5eldud ruuteri teabe kuulutamiseks. <\/p>\n

Haavatavust saab \u00e4ra kasutada ainult kohalikust v\u00f5rgust ja see ilmneb s\u00fcsteemides, kus on lubatud IPv6 tugi ja aktiivne sysctl parameeter «net.ipv6.conf.<v\u00f5rgu_liidese_nimi>.accept_ra» (saate seda kontrollida k\u00e4suga «sysctl net.ipv6.conf| grep accept_ra»), mis on vaikimisi keelatud RHEL-is ja Ubuntu-s v\u00e4liste v\u00f5rgu liideste jaoks, kuid lubatud loopback liidese jaoks, mis v\u00f5imaldab r\u00fcnnakut samalt s\u00fcsteemilt. <\/p>\n

Haavatavus tuleneb v\u00f5istlusolukorrast m\u00e4luhalduri vanade fib6_info kirje t\u00f6\u00f6tlemisel, mis v\u00f5ib viia juba vabastatud m\u00e4lu ala (use-after-free) p\u00f6\u00f6rdumiseni. ICMPv6 paketi saamisel, mis sisaldab ruuteri kuulutuse s\u00f5numit (RA, Router Advertisement), kutsub v\u00f5rgustiku virde v\u00e4lja funktsiooni ndisc_router_discovery(), mis RA s\u00f5numis, juhul kui seal on andmeid marsruudi eluea kohta, kutsub funktsiooni fib6_set_expires() ja t\u00e4idab gc_link struktuuri. Vananenud kirjete puhastamiseks kasutatakse funktsiooni fib6_clean_expires(), mis eraldab kirje gc_link-ist ja vabastab m\u00e4lu, mida fib6_info struktuur kasutab. On olemas kindel hetk, mil fib6_info struktuuri m\u00e4lu on juba vabastatud, kuid viide sellele p\u00fcsib endiselt gc_link struktuuris. <\/p>\n

Haavatavus ilmneb alates versioonist 6.6 ja on k\u00f5rvaldatud versioonides 6.6.9 ja 6.7. Haavatavuse k\u00f5rvaldamise olekut levitustes saab hinnata j\u00e4rgmistelt lehtedelt: Debian, Ubuntu, SUSE, RHEL, Fedora, Arch Linux, Gentoo, Slackware. Levitusest, kus tarnitakse 6.6 tuuma pakette, v\u00f5ib m\u00e4rkida Arch Linuxi, Gentoo, Fedora, Slackware, OpenMandriva ja Manjaro, teistes levitustes pole v\u00e4listatud, et muudatused, mis sisaldavad viga, backportitakse vanemate tuuma harude pakettidesse (n\u00e4iteks Debianis mainitakse, et haavatav on pakett tuumaga 6.5.13, samas kui probleemne muudatus ilmus harusse 6.6). Kaitse \u00fcmberhindamisena v\u00f5ib IPv6 keelata v\u00f5i m\u00e4\u00e4rata parameetritele «net.ipv6.conf.*.accept_ra» v\u00e4\u00e4rtuse 0.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-6200) \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ICMPv6 \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435\u043c RA (Router Advertisement), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043b\u044f \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441\u043e \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113232","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linuxi tuuma IPv6 st\u00e4ki haavatavus, mis v\u00f5imaldab kaugelt koodi k\u00e4ivitamist | ProHoster","description":"K\u00e4ttev\u00f5imalus CVE-2023-6200 puudutav teave Linuxi tuuma v\u00f5rgu st\u00e4ki haavatavuse kohta, mis teatud tingimustel v\u00f5imaldab r\u00fcndajal kohalikust v\u00f5rgust oma koodi k\u00e4ivitada.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-ipv6-steke-yadra-linux-dopuskayushhaya-udalyonnoe-vypolnenie-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 IPv6-\u0441\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 Linux, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-6200) \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0437 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-ipv6-steke-yadra-linux-dopuskayushhaya-udalyonnoe-vypolnenie-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-29T16:50:31+00:00","article:modified_time":"2024-01-29T16:50:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113232","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=113232"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113232\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=113232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=113232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=113232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}