{"id":125693,"date":"2025-05-30T15:06:05","date_gmt":"2025-05-30T13:06:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-apport-i-systemd-coredump-pozvolyayushhie-izvlech-heshi-parolej-polzovatelej-sistemy"},"modified":"2025-05-30T15:06:05","modified_gmt":"2025-05-30T13:06:05","slug":"uyazvimosti-v-apport-i-systemd-coredump-pozvolyayushhie-izvlech-heshi-parolej-polzovatelej-sistemy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-apport-i-systemd-coredump-pozvolyayushhie-izvlech-heshi-parolej-polzovatelej-sistemy","title":{"rendered":"Vulnerabilities in apport and systemd-coredump that allow the extraction of system user password hashes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Qualys avastas kaks haavatavust apport'i (CVE-2025-5054) ja systemd-coredump'i (CVE-2025-4598) t\u00f6\u00f6riistades, mida kasutatakse p\u00e4rast protsesside ootamatut sulgemist genereeritud core-failide t\u00f6\u00f6tlemiseks. Need haavatavused v\u00f5imaldavad p\u00e4\u00e4seda juurde core-failidele, mis on salvestatud p\u00e4rast suid-rakenduste v\u00f5i m\u00f5ne s\u00fcsteemi taustprotsessi ootamatut sulgemist, mille m\u00e4lu v\u00f5ib sisaldada vahem\u00e4llu salvestatud mandaate v\u00f5i kr\u00fcpteerimisv\u00f5tmeid. Apport'i utiliiti kutsutakse automaatselt, et salvestada core-dumpid Ubuntu's, samas kui systemd-coredump'i kasutatakse Red Hat Enterprise Linux 9+, Fedora ja paljude teiste Linuxi jaotiste puhul.      <\/p>\n<p>R\u00fcnnakutehnika demonstreerimisel loodi tingimused suid-rakenduse unix_chkpwd ootamatuks sulgemiseks ja p\u00e4\u00e4suks core-faili, kus on seisundid rikke ajal. Salvestatud core-dump'is olid s\u00fcsteemi kasutajate paroolide r\u00e4si, mis j\u00e4\u00e4vad ootamatult sulgunud protsessi m\u00e4llu p\u00e4rast \/etc\/shadow sisu laadimist. Haavatavuste \u00e4rakasutamise v\u00f5imalust demonstreeriti Ubuntu 24.04 ja Fedora 40\/41 korral, kuid eeldatakse, et ka teised jaotised on sarnastele r\u00fcnnakutele avatud.        <\/p>\n<p>M\u00f5lemad haavatavused on p\u00f5hjustatud v\u00f5idus\u00f5idutingimustest, mis v\u00f5imaldavad asendada ootamatult sulgunud suid-protsessi teise protsessiga ajavahemikus peale selle k\u00e4ivitamist tuuma poolt, kuid enne kui kasutajaruumi t\u00f6\u00f6tlija kontrollib protsessi parameetreid l\u00e4bi \/proc\/pid\/files. Apport'i ja systemd-coredump'i kutse tehakse j\u00e4rgmiselt: tuum, saades teavet protsessi ootamatu sulgemise kohta, k\u00e4ivitab t\u00f6\u00f6tlija, mis on m\u00e4\u00e4ratud failis \/proc\/sys\/kernel\/core_pattern, seej\u00e4rel edastab core-dump'i sisu selle sisendi kaudu.    <\/p>\n<p>Core-dump'i genereerimine ja t\u00f6\u00f6tlija k\u00e4ivitamine ei toimu koheselt ning see aeg on piisav, et asendada l\u00f5petatud suid-protsess tavakasutaja protsessiga. Kui asendamine toimub, peab k\u00e4ivitatud core-dumpi t\u00f6\u00f6tlija olema veendunud, et rike ei toimunud suid-protsessis, vaid tavakasutaja rakenduses, ja seega salvestab core-faili, millele on juurdep\u00e4\u00e4s tavakasutajal, mitte ainult administraatoril.    <\/p>\n<p>R\u00fcnnak apport'i vastu koosneb j\u00e4rgmistest sammudest:  <\/p>\n<ul>\n<li class=\"l\"> Loodud uus protsess ja kutsutakse v\u00e4lja execve() funktsioon suid-programmi, nagu unix_chkpwd, k\u00e4ivitamiseks.\n<li class=\"l\"> Kuluva aeg, mis on vajalik suid-programmi konfidentsiaalsete andmete laadimiseks m\u00e4llu (unix_chkpwd korral oodatakse, et k\u00f5ikide s\u00fcsteemi kasutajate paroolih\u00e4kkide laadimine toimub failist \/etc\/shadow).\n<li class=\"l\"> Enne k\u00e4su t\u00e4itmise l\u00f5ppu saadetakse protsessile SIGSEGV v\u00f5i SIGSYS signaal, et see \u00e4kki l\u00f5petada.\n<li class=\"l\"> \u00c4kilise l\u00f5petamise korral genereerib kernel core-dump'i ja k\u00e4ivitab apport' protsessi core-dump'i t\u00f6\u00f6tlemiseks kasutajate ruumis.\n<li class=\"l\"> P\u00e4rast apport'i k\u00e4ivitamist, kuid enne \u00e4kiliselt l\u00f5petatud protsessi anal\u00fc\u00fcsimist saadetakse sellele SIGKILL signaal ja protsess asendatakse teisega, millel ei ole suid lippu. Kontrollide ringi m\u00f6\u00f6da p\u00e4\u00e4semiseks luuakse uus protsess erinevatesse nimede ruumidesse (kasutaja, pid ja mount namespace).\n<li class=\"l\"> apport \u00fchendub unix-soketiga \/run\/apport.socket, mis on loodud uue protsessi mount namespace'is, ja saadab failihalduri, et p\u00e4\u00e4seda core-dump'ile.    <\/ul>\n<p>Selleks, et saada uuele protsessile vajalik ID, mis vastab suid-protsessi ID-le, peatatakse suid-protsess SIGSTOP signaaliga enne SIGSEGV signaali saatmist, ja selle peatamise ajal k\u00e4ivitatakse ts\u00fckliliselt uusi protsesse, kuni saadakse PID, mille eelmine number on l\u00e4hedane asendatavale suid-protsessile. PID nummerdamise nihke j\u00e4rel saadetakse suid-protsessile SIGSEGV ja SIGCONT signaalid, p\u00e4rast mida saadetakse SIGKILL ja ts\u00fckliliselt k\u00e4ivitatakse uusi protsesse, et saavutada sama PID, mis on suid-protsessil.      <\/p>\n<p>\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f systemd-coredump, \u0442\u043e \u0441 \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043d\u0435\u0433\u043e \u043f\u0440\u043e\u0449\u0435, \u0442\u0430\u043a \u043a\u0430\u043a \u043d\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u043c\u0435\u043d\u044f\u0442\u044c suid-\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f AT_UID \u0438 AT_EUID.  \u0421 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b  systemd-coredump \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u0447\u0442\u043e \u0434\u0430\u0451\u0442 \u043c\u0435\u043d\u044c\u0448\u0435  \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b,   \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 apport, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 Python \u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0433\u0440\u0443\u0437\u0438\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 pyc-\u0444\u0430\u0439\u043b\u044b. \u041f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0440\u0435\u0448\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435\u043c systemd-coredump &#8212; \u043f\u0440\u0438 \u0432\u044b\u0437\u043e\u0432\u0435 suid-\u0444\u0430\u0439\u043b\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442\u0441\u044f \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u043d\u0443\u0436\u043d\u0443\u044e \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0443, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0443\u044e \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \/proc\/pid\/cmdline.        <\/p>\n<p>\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e     systemd-coredump \u043f\u0440\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0432\u044b\u0437\u043e\u0432\u0430 \u043d\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0432 \/proc\/sys\/kernel\/core_pattern \u0444\u043b\u0430\u0433 &#171;%d&#187;, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0444\u043e\u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043e\u0442\u0432\u0435\u0442\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0430. \u041f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 setuid-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u043d\u043e \u0438 \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u043a\u0430\u043a sshd-session (OpenSSH), sd-pam (systemd) \u0438 cron, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043e\u0441\u0435\u0432\u0448\u0438\u0445 \u0432 \u0438\u0445 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \/etc\/shadow, \u043a\u0430\u043d\u0430\u0440\u0435\u0435\u0447\u043d\u044b\u0435 \u043c\u0435\u0442\u043a\u0438 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 (ASLR).        <\/p>\n<p>Paketiuuenduste avaldamise j\u00e4lgimist jaotustes saab teha lehtedel: Debian, Ubuntu, RHEL, openSUSE, Fedora, Gentoo, Arch. K\u00fcberturbehaavatavuste blokeerimiseks pakutakse v\u00e4lja lahendus, mille kohaselt keelatakse core-\u00e4rakogude salvestamine suid-programmide ja privileegide \u00fclekandvate protsesside jaoks, seadistades parameetri \/proc\/sys\/fs\/suid_dumpable v\u00e4\u00e4rtuseks 0. Probleemi t\u00e4ielikuks k\u00f5rvaldamiseks on vajalik muudatused Linuxi tuumas, mis rakendab teabe edastamise v\u00f5imaluse kokku kukkunud protsessi kaudu pidfd mehhanismi (pidfd on seotud konkreetsete protsessidega ja erinevalt pid-st ei saa see uuesti m\u00e4\u00e4rata).<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63328\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 apport (CVE-2025-5054) \u0438 systemd-coredump (CVE-2025-4598), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 core-\u0444\u0430\u0439\u043b\u043e\u0432, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a core-\u0444\u0430\u0439\u043b\u0430\u043c, \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f suid-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u043e\u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0423\u0442\u0438\u043b\u0438\u0442\u0430 apport \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f core-\u0434\u0430\u043c\u043f\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-125693","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 apport (CVE-2025-5054) \u0438 systemd-coredump (CVE-2025-4598), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 core-\u0444\u0430\u0439\u043b\u043e\u0432, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-apport-i-systemd-coredump-pozvolyayushhie-izvlech-heshi-parolej-polzovatelej-sistemy\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 apport \u0438 systemd-coredump, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 apport (CVE-2025-5054) \u0438 systemd-coredump (CVE-2025-4598), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 core-\u0444\u0430\u0439\u043b\u043e\u0432, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-apport-i-systemd-coredump-pozvolyayushhie-izvlech-heshi-parolej-polzovatelej-sistemy\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-05-30T13:06:05+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-05-30T13:06:05+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Haavatavused apporti ja systemd-coredump'is, mis v\u00f5imaldavad s\u00fcsteemi kasutajate paroolih\u00e4kkide h\u00e4shede v\u00e4ljav\u00f5tmist | ProHoster","description":"Qualys tuvastas kaks haavatavust apport (CVE-2025-5054) ja systemd-coredump (CVE-2025-4598) t\u00f6\u00f6riistades, mis k\u00e4sitlevad p\u00e4rast protsesside ootamatut l\u00f5petamist genereeritud core-faile.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-apport-i-systemd-coredump-pozvolyayushhie-izvlech-heshi-parolej-polzovatelej-sistemy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 apport \u0438 systemd-coredump, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 apport (CVE-2025-5054) \u0438 systemd-coredump (CVE-2025-4598), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 core-\u0444\u0430\u0439\u043b\u043e\u0432, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-apport-i-systemd-coredump-pozvolyayushhie-izvlech-heshi-parolej-polzovatelej-sistemy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-30T13:06:05+00:00","article:modified_time":"2025-05-30T13:06:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"125693","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 13:05:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:05:20","updated":"2026-01-23 13:05:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/125693","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=125693"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/125693\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=125693"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=125693"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=125693"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}