{"id":152349,"date":"2025-12-22T17:12:34","date_gmt":"2025-12-22T15:12:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd"},"modified":"2025-12-22T17:12:34","modified_gmt":"2025-12-22T15:12:34","slug":"udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","title":{"rendered":"Kaugjuhtimise root-haavatavus IPv6 automaatkonfiguratsiooni t\u00f6\u00f6tlejas FreeBSD-s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

FreeBSDi rakendatavates taustprotsessides rtsold ja utiliidis rtsol avastati haavatavus (CVE-2025-14558), mis v\u00f5imaldab saavutada kaugt\u00e4idete sooritamist root-i \u00f5igustes, saates spetsiaalselt kujundatud IPv6 ruuterireklaami pakette. RA-s\u00f5numid (Router Advertisement), mille kaudu haavatavust kasutatakse, ei suunata edasi ja peaksid ruuterite poolt k\u00f5rvale heidetama. R\u00fcnnaku sooritamiseks peab r\u00fcndaja olema v\u00f5imeline saatma spetsiaalselt kujundatud paketti s\u00fcsteemist, mis asub samas v\u00f5rgu segmendis haavatava hostiga. <\/p>\n

Taustprotsess rtsold kasutatakse hostides auto seadistamiseks IPv6 kaudu SLAAC (StateLess Address AutoConfiguration) mehhanismi abil. Host saadab ICMPv6 s\u00f5numi RS (Router Solicitation) multikastre\u017eiimis ja ootab vastavaid RA-s\u00f5numeid (Router Advertisement) ruuteritelt, mis sisaldavad teavet v\u00f5rgu prefiksi ja seadistamisparameetrite kohta. Utiliit rtsol rakendab sarnast funktsionaalsust ilma taustprotsessi k\u00e4ivitamata. <\/p>\n

V\u00f5rgu haavatavus on tingitud sellest, et rtsold edastab RA-s\u00f5numis m\u00e4\u00e4ratud \"domain search\" nimekirja utiliidile resolvconf ilma korrektset kontrolli tegemata ja ilma erim\u00e4rkide talletamiseta. Utiliit resolvconf on shell-skript, mis ei kontrolli sisendeid. Haavatavuse \u00e4ra kasutamiseks piisab RA-paketi saatmisest, mille nimi domeen<\/a>, sisaldab erim\u00e4rke, n\u00e4iteks \"test`id`test.\" Haavatavus on k\u00f5rvaldatud FreeBSD 15.0-RELEASE-p1, 14.3-RELEASE-p7, 13.5-RELEASE-p8 v\u00e4rskendustes. <\/p>\n

Lisaks on FreeBSD 14.3-RELEASE-p7 ja 13.5-RELEASE-p8 v\u00e4rskendustes (15.x haru ei ole probleemiga seotud) k\u00f5rvaldatud haavatavus (CVE-2025-14769) paketifiltris ipfw, mis v\u00f5imaldab teenuse keelamist spetsiaalselt vormindatud pakettide saatmise kaudu. Haavatavus avaldub ainult ipfw reeglite seas, kus kasutatakse direktiivi \"tcp-setmss.\" Probleem on tingitud sellest, et tcp-setmss t\u00f6\u00f6tleja v\u00f5ib teatud asjaoludel vabastada m\u00e4lu, kus olevaid paketi vastuv\u00f5etud andmeid hoitakse, ning tagastada vea. Antud viga j\u00e4eti reeglite t\u00f6\u00f6tlemise mootoris t\u00e4helepanuta, mist\u00f5ttu j\u00e4rgmine reegel v\u00f5is lubada paketi edasiviimise, mille andmebuffer oli juba vabastatud, mis viib nullviitide de-referentsini.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e FreeBSD \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 rtsold \u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 rtsol \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-14558), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 c \u0430\u043d\u043e\u043d\u0441\u043e\u043c IPv6-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430. RA-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f (Router Advertisement), \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u043e\u0442\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c\u0438. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-152349","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kaugarvuti root-haavatavus IPv6 automaatkonfiguratsiooni t\u00f6\u00f6tlejas FreeBSD-s | ProHoster","description":"FreeBSD-s rakendatavas taustaprotsessis rtsold ja utiliidis rtsol leiti haavatavus (CVE-2025-14558), mis v\u00f5imaldab saada kaugselt root-kasutaja \u00f5igusi spetsiaalselt kujundatud paketi saatmise kaudu.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u0430\u0432\u0442\u043e\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 IPv6 \u0432\u043e FreeBSD | ProHoster","og:description":"\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432\u043e FreeBSD \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 rtsold \u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 rtsol \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-14558), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 c.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/udalyonnaya-root-uyazvimost-v-obrabotchike-avtokonfiguraczii-ipv6-vo-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-22T15:12:34+00:00","article:modified_time":"2025-12-22T15:12:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"152349","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:13:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 13:45:19","updated":"2026-03-05 11:13:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/152349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=152349"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/152349\/revisions"}],"predecessor-version":[{"id":163270,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/152349\/revisions\/163270"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=152349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=152349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=152349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}