{"id":117137,"date":"2024-07-09T15:43:01","date_gmt":"2024-07-09T13:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda"},"modified":"2024-07-09T15:43:01","modified_gmt":"2024-07-09T13:43:01","slug":"uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","title":{"rendered":"RHEL 9 OpenSSH pakettides leitud haavatavus, mis v\u00f5imaldab kaugkoodi t\u00e4itmist","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vaatamata eelmisel n\u00e4dalal tuvastatud OpenSSH kriitilisele haavatavusele, avastati veel \u00fcks sarnane haavatavus (CVE-2024-6409), mis v\u00f5imaldab saavutada kaugl\u00e4hetust ilma autentimiseta. Uus haavatavus ei ole nii ohtlik kui eelmine, kuna see avaldub p\u00e4rast privileegide t\u00fchistamist k\u00e4ivitatud SSH-serveri alamprotsessis. Haavatavus on olemas Red Hat Enterprise Linux 9 pakettides, mis p\u00f5hinevad 2021. aastal avaldatud OpenSSH 8.7 versioonil. Probleem puudutab ka Fedora Linux 36 ja 37 pakette, mis p\u00f5hinevad OpenSSH 8.7 ja 8.8 v\u00e4ljaannetel. <\/p>\n

Oma olemuselt on haavatavus sarnane eelmisele probleemile ja on samuti p\u00f5hjustatud SIGALRM katkestuse t\u00f6\u00f6tleja v\u00f5istlusest, mis tuleneb funktsioonide t\u00e4itmisest, mis ei ole m\u00f5eldud as\u00fcnkroonses re\u017eiimis signaalide t\u00f6\u00f6tlejatest v\u00e4lja kutsuma. T\u00f6\u00f6tleja aktiveeritakse, kui aegumisaeg, mille m\u00e4\u00e4rab parameeter LoginGraceTime, on m\u00f6\u00f6dunud, ja katkestab praeguse koodi t\u00e4itmise. Katkestuste t\u00f6\u00f6tlejas as\u00fcnkroonselt t\u00e4itmiseks mitte sobivate funktsioonide, nagu syslog(), kasutamine v\u00f5ib p\u00f5hjustada malloc'i sisemiste struktuuride kahjustusi, kui SIGALRM aktiveeritakse teatud koodi t\u00e4itmise ajal. <\/p>\n

Uus haavatavus erineb sellest, et v\u00f5istlusolukord tekib, kui signaali t\u00f6\u00f6tlejas grace_alarm_handler() kutsutakse funktsioon cleanup_exit(). OpenSSH p\u00f5hikoodis v\u00f5ib seda funktsiooni kasutada as\u00fcnkroonselt t\u00e4idetavas koodis, kuid RHEL 9 ja Fedora pakettidesse on rakendatud t\u00e4iendav plaastr, mis lisab cleanup_exit() funktsiooni, et genereerida auditi s\u00fcndmusi, mis on ette n\u00e4htud signaalide t\u00f6\u00f6tlejatena kasutamiseks. <\/p>\n

Seda plaas oli kasutusel RHEL 9 ja sellega seotud distributsioonides pakettides, mis p\u00f5hinevad OpenSSH 8.7p1. Kehtivates Fedora versioonides probleem ei ilmne, kuna alates Fedora 38 on distributsioon l\u00e4inud uuema versiooni OpenSSH juurde ilma cleanup_exit() muutmata. Erinevalt eelnevast haavatavusest ei sobi uue probleemi blokeerimiseks sshd-s kaitsemoodus, mis p\u00f5hineb optsiooni «-e» kasutamisel, mis keelab logi v\u00e4ljundit syslogi kaudu. Siiski saab sshd_config-is haavatavuse blokeerimiseks seadistada parameetri «LoginGraceTime=0».
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u043f\u043e\u0445\u043e\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-6409), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0441\u0442\u043e\u043b\u044c \u043e\u043f\u0430\u0441\u043d\u0430 \u043a\u0430\u043a \u043f\u0440\u043e\u0448\u043b\u0430\u044f, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c SSH-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0434\u043e\u0447\u0435\u0440\u043d\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 openssh \u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-117137","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 RHEL 9 OpenSSH-pakettides leitud haavatavus, mis v\u00f5imaldab koodi kaugk\u00e4ivitamist | ProHoster","description":"OpenSSH-s viimase n\u00e4dala jooksul avastatud kriitilise haavatavuse uurimise k\u00e4igus avastati veel \u00fcks sarnane haavatavus (CVE-2024-6409), mis v\u00f5imaldab koodi kaugk\u00e4ivitamist ilma autentsusprotsessita.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0441 OpenSSH \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 RHEL 9, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u043f\u043e\u0445\u043e\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-6409), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-09T13:43:01+00:00","article:modified_time":"2024-07-09T13:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"117137","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:51:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:51:40","updated":"2026-01-23 03:51:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/117137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=117137"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/117137\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=117137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=117137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=117137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}