{"id":119988,"date":"2024-09-30T09:21:07","date_gmt":"2024-09-30T07:21:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux"},"modified":"2024-09-30T09:21:07","modified_gmt":"2024-09-30T07:21:07","slug":"uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","title":{"rendered":"Haavatavused libnv-s FreeBSD-s ja Netfilter-is Linuxis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Septembri alguses v\u00e4lja antud turvaaugu paranduses libnv teegis leiti loogikaviga, mille t\u00f5ttu turvaauk ei k\u00f5rvaldatud n\u00f5uetekohaselt ja s\u00fcsteem j\u00e4i r\u00fcnnakute suhtes haavatavaks. Libnv teeki arendab FreeBSD projekt ning seda kasutatakse kernelis ja rakendustes baass\u00fcsteemis v\u00f5tme\/v\u00e4\u00e4rtuse loendite t\u00f6\u00f6tlemiseks ja andmete edastamise korraldamiseks protsessidevahelises suhtluses. Teek p\u00f5hineb OpenZFS projektis kasutataval nvlist algoritmil, kuid FreeBSDs on loodud selle jaoks eraldi rakendus, seega turvaauk ei m\u00f5juta OpenZFSi. <\/p>\n

Turvaauk on p\u00f5hjustatud t\u00e4isarvude \u00fclelaest, mis viib andmebuumi eraldamiseni, mille suurus on v\u00e4iksem kui bufi kirjutatav andmeplokk. Tekkinud viga v\u00f5ib potentsiaalselt kasutada privileegide t\u00f5stmiseks, kirjutades \u00fcle m\u00e4lualasid kernelis ja s\u00fcsteemiprotsessides. N\u00e4iteks kasutatakse libnv-d libcasperis, kui k\u00e4iakse suhtlust privileegitud ja mitteprivileegitud koodi vahel. Turvaaugu \u00f5ige parandamine (CVE-2024-45287) on ette n\u00e4htud v\u00e4rskendustes 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 ja 13.3-RELEASE-p7, samuti patch-vormis. <\/p>\n

FreeBSD-s on samuti k\u00f5rvaldatud turvaauk (CVE-2024-41721) hiperviisor bhyve'is, mis v\u00f5imaldab potentsiaalselt koodi k\u00e4ivitada host-s\u00fcsteemis, mis tavaliselt omab root \u00f5igusi, kuid on isoleeritud Capsicum'il p\u00f5hinevas sandboxes, kui manipuleerida k\u00fclaliss\u00fcsteemi sees. Turvaauk on olemas USB-kontrolleri XHCI emuleerimise koodis ja seda p\u00f5hjustab ebapiisav piiri kontrollimine, mis v\u00f5ib viia andmete lugemise buffrist v\u00e4ljaspool asuvast piirkonnast, samuti potentsiaalselt v\u00f5imalus kirjutada suvalisse protsessi m\u00e4lualasse. R\u00fcnnakut saab sooritada, kui k\u00fclaliss\u00fcsteemis on privileegitud protsesside k\u00e4itamise v\u00f5imalus. Turvaauk on k\u00f5rvaldatud v\u00e4rskendustes FreeBSD 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 ja 13.3-RELEASE-p7. <\/p>\n

Lisaks v\u00f5ib m\u00e4rkida, et on avaldatud t\u00f6\u00f6tavad protot\u00fc\u00fcbid eksploitidest ja nende kasutusmeetodite kirjeldused varem avastatud Linuxi tuuma haavatavuste CVE-2024-26808 ja CVE-2024-1085 osas. Probleemid on k\u00f5rvaldatud tuuma v\u00e4rskendustes 5.10.210, 5.15.149, 6.1.76, 6.6.15, 6.7.3 ja 6.8 ning on juba parandatud p\u00f5hijagajates (Debian, Ubuntu, RHEL, SUSE, Fedora). Haavatavused on p\u00f5hjustatud juba vabastatud m\u00e4lupiirkonna kasutamisest funktsioonides nft_chain_filter ja nft_setelem_catchall_deactivate netfilteri alam s\u00fcsteemis ning v\u00f5imaldavad koodi t\u00e4itmist root \u00f5igustes. R\u00fcnnaku teostamiseks on vajalik juurdep\u00e4\u00e4s nftables'ile, mis on saadaval CAP_NET_ADMIN \u00f5iguste olemasolul mis tahes kasutaja ID ruumis (user namespace) v\u00f5i v\u00f5rgu ruumis (network namespace), n\u00e4iteks isoleeritud konteinerites. <\/p>\n

Eksploidid on ette valmistanud KernelCTF (Kernel Capture the Flag) algatuse liikmed, mille raames maksab Google tasu Linuxi tuumas avastatud haavatavuste eest. Alguses k\u00e4sitleti neid probleeme kui \u00fcht paljusid potentsiaalseid haavatavusi tuumas \u2014 n\u00e4iteks, juuni tuuma 5.10 paketi uuenduses, lisaks CVE-2024-26808, parandati veel 345 (!) potentsiaalset haavatavust. Igal n\u00e4dalal avastatakse tuumas mituk\u00fcmmend uut haavatavust, mida varem ei seostatud turbeprobleemidega (n\u00e4iteks eelmisel n\u00e4dalal tuvastati 68 haavatavust).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libnv \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 libnv \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c FreeBSD \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u044f\u0434\u0440\u0435 \u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438\u0437 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u043a\u043b\u044e\u0447\/\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119988","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47libnv haavatavus FreeBSD-s ja Netfilteri haavatavused Linuxis | ProHoster","description":"Septembri alguses v\u00e4lja antud libnv raamatukogu haavatavuse paranduses tuvastati loogikaviga, mis takistas haavatavuse n\u00f5uetekohast k\u00f5rvaldamist ja leidis, et s\u00fcsteem j\u00e4i r\u00fcnnaku alla.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 libnv \u0432\u043e FreeBSD \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Netfilter \u0432 Linux | ProHoster","og:description":"\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libnv \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-30T07:21:07+00:00","article:modified_time":"2024-09-30T07:21:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119988","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 06:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:55:19","updated":"2026-01-23 06:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119988","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=119988"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119988\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=119988"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=119988"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=119988"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}