{"id":117137,"date":"2024-07-09T15:43:01","date_gmt":"2024-07-09T13:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda"},"modified":"2024-07-09T15:43:01","modified_gmt":"2024-07-09T13:43:01","slug":"uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","title":{"rendered":"Haavatavus RHEL 9 OpenSSH paketis, mis v\u00f5imaldab kaugk\u00e4ivitamist.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

OpenSSH-s eelmisel n\u00e4dalal avastatud kriitilise haavatavuse uurimise k\u00e4igus avastati veel \u00fcks sarnane haavatavus (CVE-2024-6409), mis v\u00f5imaldab kaugt\u00e4ideviimist ilma autentimiseta. Uus haavatavus ei ole nii t\u00f5sine kui eelmine, kuna see ilmneb p\u00e4rast privileegide tagasiv\u00f5tmist k\u00e4imasolevas SSH-serveri alamprotsessis. Haavatavus esineb openssh pakettides, mis on p\u00e4rit Red Hat Enterprise Linux 9 ja p\u00f5hinevad 2021. aastal avaldatud OpenSSH 8.7 versioonil. Probleem puudutab ka Fedora Linux 36 ja 37 pakette, mis p\u00f5hinevad OpenSSH 8.7 ja 8.8 versioonidel. <\/p>\n

Haavatavus on olemuselt sarnane eelnevale probleemile ja on samuti p\u00f5hjustatud v\u00f5idus\u00f5idureeglist SIGALRM katkestuse t\u00f6\u00f6tlejas, mis tuleneb funktsioonide k\u00e4itamisest, mida ei ole m\u00f5eldud as\u00fcnkroonses re\u017eiimis kutsumiseks signaalide t\u00f6\u00f6tlejatest. T\u00f6\u00f6tleja aktiveeritakse, kui aegumisaeg, mis on m\u00e4\u00e4ratud parameetri LoginGraceTime abil, saabub ja katkestab praeguse koodi t\u00e4itmise. Katkestuste t\u00f6\u00f6tlejas, kus kasutatakse as\u00fcnkroonselt t\u00e4itmiseks ettevalmistamata funktsioone, mis teevad d\u00fcnaamilist m\u00e4lureserveerimist, nagu syslog(), v\u00f5ib SIGALRM-i aktiveerimise ajal tekkida malloc siseandmete kahjustus. <\/p>\n

Uus haavatavus erineb sellest, et v\u00f5idus\u00f5idureegel tekib grace_alarm_handler() signaalit\u00f6\u00f6tlija funktsiooni cleanup_exit() kutsumise t\u00f5ttu. OpenSSH peamises koodibaasis v\u00f5ib seda funktsiooni kasutada as\u00fcnkroonselt t\u00e4idetavas koodis, kuid RHEL 9 ja Fedora pakettides on rakendatud t\u00e4iendav plaastr, mis lisab cleanup_exit() funktsiooni, et genereerida audititeateid, mis on m\u00f5eldud korraldatud signaalide t\u00f6\u00f6tlejatele. <\/p>\n

See patch on RHEL 9 and distributions based on packages derived from OpenSSH 8.7p1. In the current releases of Fedora, this issue does not occur, as starting from Fedora 38, the distribution switched to a newer version of OpenSSH without changing cleanup_exit(). Unlike the previous vulnerability, a workaround based on using the sshd option «-e», which disables logging through syslog, is not suitable for blocking the new issue. However, to block the vulnerability in sshd_config, the parameter «LoginGraceTime=0» can be set.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u043f\u043e\u0445\u043e\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-6409), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0441\u0442\u043e\u043b\u044c \u043e\u043f\u0430\u0441\u043d\u0430 \u043a\u0430\u043a \u043f\u0440\u043e\u0448\u043b\u0430\u044f, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c SSH-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0434\u043e\u0447\u0435\u0440\u043d\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 openssh \u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-117137","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH pakettides RHEL 9-s avastatud haavatavus, mis v\u00f5imaldab kaugt\u00e4ideviimist | ProHoster","description":"OpenSSH-s eelmisel n\u00e4dalal avastatud kriitilise haavatavuse uurimise k\u00e4igus avastati veel \u00fcks sarnane haavatavus (CVE-2024-6409), mis v\u00f5imaldab kaugt\u00e4ideviimist ilma autentimiseta. Uus haavatavus ei ole nii t\u00f5sine kui eelmine, kuna see ilmneb p\u00e4rast privileegide tagasiv\u00f5tmist k\u00e4imasolevas SSH-serveri alamprotsessis. Haavatavus esineb openssh pakettides, mis on p\u00e4rit Red Hat Enterprise Linux 9.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0441 OpenSSH \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 RHEL 9, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u043f\u043e\u0445\u043e\u0436\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-6409), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0441\u0442\u043e\u043b\u044c \u043e\u043f\u0430\u0441\u043d\u0430 \u043a\u0430\u043a \u043f\u0440\u043e\u0448\u043b\u0430\u044f, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c SSH-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0434\u043e\u0447\u0435\u0440\u043d\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 openssh \u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9,","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-paketah-s-openssh-iz-sostava-rhel-9-dopuskayushhaya-udalyonnoe-vypolnenie-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-09T13:43:01+00:00","article:modified_time":"2024-07-09T13:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"117137","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:51:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:51:40","updated":"2026-01-23 03:51:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/117137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=117137"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/117137\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=117137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=117137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=117137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}