{"id":119988,"date":"2024-09-30T09:21:07","date_gmt":"2024-09-30T07:21:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux"},"modified":"2024-09-30T09:21:07","modified_gmt":"2024-09-30T07:21:07","slug":"uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","title":{"rendered":"Viga libnv-s FreeBSD-s ja Netfilteri haavatavustes Linuxis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Septembri alguses v\u00e4lja antud libnv teegi haavatavuse paranduses tuvastati loogikaviga, mille t\u00f5ttu haavatavus ei k\u00f5rvaldatud korralikult ja s\u00fcsteem j\u00e4i r\u00fcnnakutele avatud. Libnv teek areneb FreeBSD projekti raames ja seda kasutatakse tuumas ning baasrakendustes v\u00f5tme\/v\u00e4\u00e4rtuse formaatide loendite t\u00f6\u00f6tlemiseks ja andmete edastamiseks protsesside vahel. Teek on loodud nvlist algoritmi p\u00f5hjal, mida rakendatakse OpenZFS projektis, kuid FreeBSD-s on loodud selle p\u00f5hjal kohandatud versioon, mist\u00f5ttu see haavatavus ei m\u00f5juta OpenZFS-i. <\/p>\n

Haavatavus on p\u00f5hjustatud t\u00e4isarvu \u00fclevoolust, mis viib bufrivea eraldamiseni, mis on v\u00e4iksem kui kirjutatav andmeblock. Tekkinud viga v\u00f5ib potentsiaalselt kasutada privileegide t\u00f5stmiseks, kirjutades \u00fcle m\u00e4lualasid tuumas ja s\u00fcsteemiprotsessides, n\u00e4iteks libnv kasutatakse libcasperis suhtlemisel privileegitud ja mitteprivileegitud koodi vahel. Haavatavuse korrektne parandus (CVE-2024-45287) on pakutud versioonides 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 ja 13.3-RELEASE-p7, samuti pat\u0161ina. <\/p>\n

FreeBSD-s on k\u00f5rvaldatud haavatavus (CVE-2024-41721) bhyve h\u00fcpervisoris, mis v\u00f5imaldab potentsiaalselt koodi t\u00e4itmist host-s\u00fcsteemi protsessis (tavaliselt root'i \u00f5igustega, kuid Capsicum-p\u00f5hise liivakasti isolatsioonis), kui manipuleerida k\u00fclalisoperatsioonis\u00fcsteemis. Haavatavus on olemas USB XHCI kontrolleri emulatsiooni koodis ja see on p\u00f5hjustatud ebapiisavast piiri kontrollimisest, mis v\u00f5ib viia andmete lugemiseni piiri \u00fcletavas m\u00e4lualas, samuti potentsiaalselt v\u00f5imaldada kirjutada suvalisse protsessi m\u00e4lukohta. R\u00fcnnakut saab teha, kui k\u00fclalisoperatsioonis\u00fcsteemis on lubatud privileegitud protsesside k\u00e4ivitamine. Haavatavus on k\u00f5rvaldatud FreeBSD uuendustes 14.1-RELEASE-p5, 14.0-RELEASE-p11, 13.4-RELEASE-p1 ja 13.3-RELEASE-p7. <\/p>\n

Samuti v\u00e4\u00e4rib m\u00e4rkimist, et on avaldatud t\u00f6\u00f6protot\u00fc\u00fcbid, ekspluateerimise meetodid ja kirjeldused varem tuvastatud haavatavuste, nagu Linuxi tuum CVE-2024-26808 ja CVE-2024-1085, suhtes. Probleemid on k\u00f5rvaldatud tuuma v\u00e4rskendustes 5.10.210, 5.15.149, 6.1.76, 6.6.15, 6.7.3 ja 6.8 ning on juba parandatud peamistes distributsioonides (Debian, Ubuntu, RHEL, SUSE, Fedora). Haavatavused on p\u00f5hjustatud juurdep\u00e4\u00e4sust juba vabastatud m\u00e4lupiirkonnale funktsioonides nft_chain_filter ja nft_setelem_catchall_deactivate netfilter'i all\u00fcksuses, v\u00f5imaldades k\u00e4ivitada koodi root \u00f5igustega. R\u00fcnnaku teostamiseks on vajalik juurdep\u00e4\u00e4s nftables'ile, mida saab saada CAP_NET_ADMIN \u00f5iguste olemasolul mistahes kasutajaidentifikaatorite (user namespace) v\u00f5i v\u00f5rguruumi (network namespace) nimes, nagu n\u00e4iteks eraldatud konteinerites. <\/p>\n

Eksploidid on koostatud KernelCTF (Kernel Capture the Flag) algatuse osalejate poolt, mille k\u00e4igus Google maksab preemiaid Linuxi tuumas leiduvate haavatavuste tuvastamise eest. Alguses k\u00e4sitleti probleeme kui \u00fchte paljusid potentsiaalseid \u00fcleminekuga seotud haavatavusi tuumas \u2014 n\u00e4iteks Debian'i 5.10 tuumapaki juuni uuenduses parandati lisaks CVE-2024-26808 ka veel 345 (!) potentsiaalset haavatavust. Igal n\u00e4dalal tuvastatakse tuumas mitu tosinat uut haavatavust, mis varem ei olnud seotud turvaprognooside probleemidega (n\u00e4iteks eelmisel n\u00e4dalal m\u00e4rgiti 68 haavatavust).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libnv \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 libnv \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c FreeBSD \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u044f\u0434\u0440\u0435 \u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438\u0437 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u043a\u043b\u044e\u0447\/\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119988","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V\u00f5i kasutada libnv FreeBSD-s ja Netfilteri haavatavusi Linuxis | ProHoster","description":"Septembri alguses v\u00e4lja antud paranduse raames leiti libnv teegis loogika viga, mis takistas haavatavuse korrektselt k\u00f5rvaldamist, muutes s\u00fcsteemi j\u00e4tkuvalt r\u00fcnnaku ohvriks. Libnv teek arendatakse FreeBSD projekti raames ja seda kasutatakse tuumas ja baasrakendustes v\u00f5tme\/v\u00e4\u00e4rtuse formaatide loendite t\u00f6\u00f6tlemiseks ning andmete edastamiseks protsessidevahelises suhtluses. Teek","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 libnv \u0432\u043e FreeBSD \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Netfilter \u0432 Linux | ProHoster","og:description":"\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libnv \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 libnv \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c FreeBSD \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u044f\u0434\u0440\u0435 \u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438\u0437 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u043a\u043b\u044e\u0447\/\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-libnv-vo-freebsd-i-uyazvimosti-v-netfilter-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-30T07:21:07+00:00","article:modified_time":"2024-09-30T07:21:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119988","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 06:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:55:19","updated":"2026-01-23 06:55:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119988","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=119988"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119988\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=119988"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=119988"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=119988"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}